CHP: a real protocol + a second implementation (readiness program)#5
Merged
Conversation
…l + legal fixes Protocol arc: signed header + host-identity attestation + valid_until; byte-exact chp-stable-v1 with published test vectors + a non-Python (Node) verifier proving cross-language interop; authenticated subject; normative governance vocabulary (denial registry, risk tiers, namespacing); safety gate + approval/budget/risk-tier all wired and conformance-guarded (local + black-box over HTTP); HTTP wire binding spec; signed OTel + W3C PROV export carrying the governance + integrity surface. Legal: correct the README license footer (was an erroneous "MIT" — the project is Apache-2.0 code / CC BY 4.0 docs), fix the copyright entity to Project Auxo, Inc., and add PATENTS / TRADEMARK.md / CLA.md. Scoped to the core protocol surface + legal; adapters/host/apps sync separately.
imonacloud
force-pushed
the
sync/protocol-as-real-protocol
branch
from
63fb4da to
d05bbe9
Compare
imonacloud
changed the title
… implementation Builds on the "Make CHP a Real Protocol" work in this PR. Proves CHP is a protocol, not a program: two independent implementations that interoperate byte-for-byte. - Phase 0 (spec-first): spec/chp-invocation-pipeline.md (normative gate ordering + denial triggers); chp-stable-v1 no-float rule (a latent cross-language hash defect — Python 0.0 vs JS 0 — closed); canon golden set + governance-bundle vector; conformance/FIXTURES.md; alignment guards; ts-types @auxo/MIT drift fix. - Phase 1 — packages/chp-sdk (@capabilityhostprotocol/sdk): TS canon/hash/sign/ verify/client, zero deps. Byte-identical signatures to Python; both-direction verify. - Phase 2 — packages/chp-host-ts (@capabilityhostprotocol/host): the governed pipeline + HTTP server. Passes conformance/runner.py --url --suite wire = 14/14. - Phase 3 — signed tier over the wire (a live TS-host bundle verifies under verify.mjs). - Phase 4 — conformance/README.md interop kit; mesh verifies the host-identity attestation before pinning (chp_host/cli.py); mcp_server smoke tests. 828 Python tests + 32 TS tests green; alignment gate holds.
imonacloud
changed the title
imonacloud
added a commit
that referenced
this pull request
Jul 5, 2026
* sync: Make CHP a Real Protocol — differentiators as normative protocol + legal fixes Protocol arc: signed header + host-identity attestation + valid_until; byte-exact chp-stable-v1 with published test vectors + a non-Python (Node) verifier proving cross-language interop; authenticated subject; normative governance vocabulary (denial registry, risk tiers, namespacing); safety gate + approval/budget/risk-tier all wired and conformance-guarded (local + black-box over HTTP); HTTP wire binding spec; signed OTel + W3C PROV export carrying the governance + integrity surface. Legal: correct the README license footer (was an erroneous "MIT" — the project is Apache-2.0 code / CC BY 4.0 docs), fix the copyright entity to Project Auxo, Inc., and add PATENTS / TRADEMARK.md / CLA.md. Scoped to the core protocol surface + legal; adapters/host/apps sync separately. * CHP Protocol Readiness Program — spec-first hardening + a second (TS) implementation Builds on the "Make CHP a Real Protocol" work in this PR. Proves CHP is a protocol, not a program: two independent implementations that interoperate byte-for-byte. - Phase 0 (spec-first): spec/chp-invocation-pipeline.md (normative gate ordering + denial triggers); chp-stable-v1 no-float rule (a latent cross-language hash defect — Python 0.0 vs JS 0 — closed); canon golden set + governance-bundle vector; conformance/FIXTURES.md; alignment guards; ts-types @auxo/MIT drift fix. - Phase 1 — packages/chp-sdk (@capabilityhostprotocol/sdk): TS canon/hash/sign/ verify/client, zero deps. Byte-identical signatures to Python; both-direction verify. - Phase 2 — packages/chp-host-ts (@capabilityhostprotocol/host): the governed pipeline + HTTP server. Passes conformance/runner.py --url --suite wire = 14/14. - Phase 3 — signed tier over the wire (a live TS-host bundle verifies under verify.mjs). - Phase 4 — conformance/README.md interop kit; mesh verifies the host-identity attestation before pinning (chp_host/cli.py); mcp_server smoke tests. 828 Python tests + 32 TS tests green; alignment gate holds.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Two arcs of protocol work, scoped to the core protocol surface + legal (adapters/apps/infra are held on `sync/backlog` for a separate PR).
Arc 1 — Make CHP a Real Protocol
The three differentiators (signed / governed / trusted) become normative, byte-specified, conformance-guarded surface: authenticated subject, signed header + host-identity attestation, byte-exact `chp-stable-v1` + a non-Python verifier, normative governance vocabulary, HTTP wire binding + black-box conformance, and the governance plane (policy/invariants/budget/approval/risk/safety) all wired and guarded.
Arc 2 — Protocol Readiness Program (a second implementation)
Proves CHP is a protocol, not a program — two implementations that interoperate byte-for-byte.
Verification
License
No MIT anywhere — Apache-2.0 (code) / CC BY 4.0 (docs) + patent grant + trademark + CLA.