# Bounded Authority Protocol v1.0.0 - Table of Contents

> Deterministic protocol verification for cryptographically bounded proof-of-possession authority.

## Pages

- Start here
  - [Overview](readme.md)
  - [Getting started](getting-started.md)
  - [Livebook: protocol walkthrough](bap-walkthrough.md)
  - [Livebook: service integration](service-integration.md)
  - [Livebook: chains and archives](chains-and-archives.md)
  - [Cheatsheet](cheatsheet.md)

- Guides
  - [Choosing a profile](choosing-a-profile.md)
  - [Recipes](recipes.md)
  - [Evidence: chains, anchors, transitions, and exports](evidence.md)
  - [Troubleshooting {:error, :invalid}](troubleshooting.md)
  - [Usage rules](usage-rules.md)
  - [Upgrading to 1.0](upgrading.md)
  - [The implementer's guide: building a conforming BAP verifier](implementers-guide.md)
  - [Other languages](other-languages.md)

- Reference
  - [API stability and versioning](api-stability.md)
  - [Glossary](glossary.md)
  - [FAQ](faq.md)
  - [Protocol charter](protocol-charter.md)
  - [Threat model](threat-model.md)
  - [Protocol registries](registries.md)

- Specifications
  - [Bounded Authority Protocol v1 Wire Profile](bap-v1.md)
  - [Bounded Authority Protocol v2 Wire Profile](bap-v2.md)
  - [Bounded Authority Protocol v3 Wire Profile](bap-v3.md)
  - [BAP Local Loopback HTTP Proof Profile 1](bap-local-loopback-http-v1.md)
  - [BAP Role Attestation Profile 1](bap-role-attestation-v1.md)
  - [BAP Content Assertion Profile 1](bap-content-assertion-v1.md)

- Conformance and governance
  - [Conformance contract](conformance-contract.md)
  - [Requirement-to-conformance map (contract-major 1)](requirement-map.md)
  - [Local-loopback HTTP profile requirement map](local-loopback-http-requirement-map.md)
  - [Role-attestation profile requirement map](role-attestation-requirement-map.md)
  - [Content-assertion profile requirement map](content-assertion-requirement-map.md)
  - [Interoperability report — BAP conformance cross-validation](interoperability-report.md)
  - [Governance policy](governance.md)
  - [Errata registry](errata.md)
  - [Standards track charter](standards-track.md)

- Project
  - [Changelog](changelog.md)
  - [Security policy](security.md)
  - [Contributing](contributing.md)
  - [Contributor Covenant Code of Conduct](code_of_conduct.md)
  - [LICENSE](license.md)
  - [NOTICE](notice.md)

## Modules

- [BoundedAuthorityProtocol](BoundedAuthorityProtocol.md): Deterministic protocol verification for cryptographically bounded
proof-of-possession authority.

- Shared types
  - [BoundedAuthorityProtocol.V1.Base64Url](BoundedAuthorityProtocol.V1.Base64Url.md): Strict bounded canonical base64url decoding for v1.
  - [BoundedAuthorityProtocol.V1.Bounds](BoundedAuthorityProtocol.V1.Bounds.md): Resource ceilings for every contract-major and sibling profile.
  - [BoundedAuthorityProtocol.V1.Jcs](BoundedAuthorityProtocol.V1.Jcs.md): Bounded RFC 8785 serialization for the closed v1 tagged JSON algebra.

  - [BoundedAuthorityProtocol.V1.Json](BoundedAuthorityProtocol.V1.Json.md): Bounded JSON decoder preserving object order and rejecting duplicate binary names.
  - [BoundedAuthorityProtocol.V1.Jwk](BoundedAuthorityProtocol.V1.Jwk.md): Exact public Ed25519 JWK encoding, decoding, and RFC 7638 thumbprints.
  - [BoundedAuthorityProtocol.V1.Uri](BoundedAuthorityProtocol.V1.Uri.md): Pure bounded normalization for hierarchical HTTPS DPoP target URIs.

- Contract-major 1
  - [BoundedAuthorityProtocol.V1](BoundedAuthorityProtocol.V1.md): Explicit entry point for the immutable v1 wire profile (contract-major 1, suite
`BAP1-Ed25519-SHA256`, normative in `spec/bap-v1.md`).
  - [BoundedAuthorityProtocol.V1.AnchorFacts](BoundedAuthorityProtocol.V1.AnchorFacts.md): Closed redacted non-authorizing historical-anchor facts.
  - [BoundedAuthorityProtocol.V1.AnchoredExportFacts](BoundedAuthorityProtocol.V1.AnchoredExportFacts.md): Closed redacted non-authorizing atomic anchored-export facts.
  - [BoundedAuthorityProtocol.V1.AnchoredExportInput](BoundedAuthorityProtocol.V1.AnchoredExportInput.md): Raw rows and compact JWS values presented for deterministic archive framing.
  - [BoundedAuthorityProtocol.V1.ArchivedObject](BoundedAuthorityProtocol.V1.ArchivedObject.md): Raw stored-object chunks and exact observed object-store version.
  - [BoundedAuthorityProtocol.V1.BoundaryAnchor](BoundedAuthorityProtocol.V1.BoundaryAnchor.md): Closed deterministic boundary-anchor signing input.
  - [BoundedAuthorityProtocol.V1.ChainFacts](BoundedAuthorityProtocol.V1.ChainFacts.md): Closed redacted non-authorizing consumption-chain facts.
  - [BoundedAuthorityProtocol.V1.ChainInput](BoundedAuthorityProtocol.V1.ChainInput.md): Raw canonical consumption rows presented for chain verification.
  - [BoundedAuthorityProtocol.V1.ConsumptionEntry](BoundedAuthorityProtocol.V1.ConsumptionEntry.md): Closed deterministic consumption-chain row producer input.
  - [BoundedAuthorityProtocol.V1.Credentials](BoundedAuthorityProtocol.V1.Credentials.md): Closed raw compact grant and proof credentials.
  - [BoundedAuthorityProtocol.V1.DecodedGrant](BoundedAuthorityProtocol.V1.DecodedGrant.md): Closed bounded decoded grant with explicitly unevaluated verification.
  - [BoundedAuthorityProtocol.V1.DecodedProof](BoundedAuthorityProtocol.V1.DecodedProof.md): Closed bounded decoded proof with explicitly unevaluated verification.
  - [BoundedAuthorityProtocol.V1.EncodedAnchoredExport](BoundedAuthorityProtocol.V1.EncodedAnchoredExport.md): Exact archive chunks, complete digest, and byte count from deterministic framing.
  - [BoundedAuthorityProtocol.V1.EncodedConsumptionEntry](BoundedAuthorityProtocol.V1.EncodedConsumptionEntry.md): Exact canonical consumption row bytes and domain-separated row hash.
  - [BoundedAuthorityProtocol.V1.EnvelopeFacts](BoundedAuthorityProtocol.V1.EnvelopeFacts.md): Closed value-bearing, redacted, non-authorizing verified envelope facts.
  - [BoundedAuthorityProtocol.V1.ExpectedAnchor](BoundedAuthorityProtocol.V1.ExpectedAnchor.md): Exact expected context for one historical boundary anchor.
  - [BoundedAuthorityProtocol.V1.ExpectedAnchoredExport](BoundedAuthorityProtocol.V1.ExpectedAnchoredExport.md): Mandatory caller context for atomic anchored-export verification.
  - [BoundedAuthorityProtocol.V1.ExpectedChain](BoundedAuthorityProtocol.V1.ExpectedChain.md): Mandatory caller-derived boundaries for one nonempty consumption-chain range.
  - [BoundedAuthorityProtocol.V1.ExpectedExport](BoundedAuthorityProtocol.V1.ExpectedExport.md): Exact semantic context required before deterministic archive framing.
  - [BoundedAuthorityProtocol.V1.ExpectedGrant](BoundedAuthorityProtocol.V1.ExpectedGrant.md): Explicit expected context for standalone raw-grant verification.
  - [BoundedAuthorityProtocol.V1.ExpectedKeyTransition](BoundedAuthorityProtocol.V1.ExpectedKeyTransition.md): Exact expected context for one authenticated historical-key transition.
  - [BoundedAuthorityProtocol.V1.ExpectedRequest](BoundedAuthorityProtocol.V1.ExpectedRequest.md): Explicit expected context for combined raw-envelope verification.
  - [BoundedAuthorityProtocol.V1.Grant](BoundedAuthorityProtocol.V1.Grant.md): Closed deterministic grant producer input.
  - [BoundedAuthorityProtocol.V1.GrantFacts](BoundedAuthorityProtocol.V1.GrantFacts.md): Closed value-bearing, redacted, non-authorizing verified grant facts.
  - [BoundedAuthorityProtocol.V1.HistoricalKeyChain](BoundedAuthorityProtocol.V1.HistoricalKeyChain.md): Ordered nonempty caller-supplied historical public-key chain.
  - [BoundedAuthorityProtocol.V1.HistoricalPublicKey](BoundedAuthorityProtocol.V1.HistoricalPublicKey.md): One exact caller-supplied historical public key and validity window.
  - [BoundedAuthorityProtocol.V1.KeyLocator](BoundedAuthorityProtocol.V1.KeyLocator.md): An untrusted key identifier hint.
  - [BoundedAuthorityProtocol.V1.KeyTransition](BoundedAuthorityProtocol.V1.KeyTransition.md): Closed deterministic historical-key transition signing input.
  - [BoundedAuthorityProtocol.V1.KeyTransitionFacts](BoundedAuthorityProtocol.V1.KeyTransitionFacts.md): Closed redacted non-authorizing authenticated key-transition facts.
  - [BoundedAuthorityProtocol.V1.Operation](BoundedAuthorityProtocol.V1.Operation.md): Closed producer input for one named operation and its ordered selectors.
  - [BoundedAuthorityProtocol.V1.Proof](BoundedAuthorityProtocol.V1.Proof.md): Closed deterministic holder-proof producer input.
  - [BoundedAuthorityProtocol.V1.Selector](BoundedAuthorityProtocol.V1.Selector.md): Closed selector type used by `BoundedAuthorityProtocol.V1.Operation`.
  - [BoundedAuthorityProtocol.V1.SigningInput](BoundedAuthorityProtocol.V1.SigningInput.md): Closed deterministic standard-JWS signing input.
  - [BoundedAuthorityProtocol.V1.TrustedIssuer](BoundedAuthorityProtocol.V1.TrustedIssuer.md): Caller-supplied already-trusted issuer key context.

- Contract-major 2
  - [BoundedAuthorityProtocol.V2](BoundedAuthorityProtocol.V2.md): Explicit entry point for the v2 wire profile (contract-major 2, the
[`BAP2-Ed25519-SHA256`](../docs/design/registries.md) suite).
  - [BoundedAuthorityProtocol.V2.AnchorFacts](BoundedAuthorityProtocol.V2.AnchorFacts.md): Closed redacted non-authorizing historical-anchor facts.
  - [BoundedAuthorityProtocol.V2.AnchoredExportFacts](BoundedAuthorityProtocol.V2.AnchoredExportFacts.md): Closed redacted non-authorizing atomic anchored-export facts.
  - [BoundedAuthorityProtocol.V2.ChainFacts](BoundedAuthorityProtocol.V2.ChainFacts.md): Closed redacted non-authorizing consumption-chain facts.
  - [BoundedAuthorityProtocol.V2.DecodedGrant](BoundedAuthorityProtocol.V2.DecodedGrant.md): Closed bounded decoded grant with explicitly unevaluated verification.
  - [BoundedAuthorityProtocol.V2.DecodedProof](BoundedAuthorityProtocol.V2.DecodedProof.md): Closed bounded decoded proof with explicitly unevaluated verification.
  - [BoundedAuthorityProtocol.V2.EnvelopeFacts](BoundedAuthorityProtocol.V2.EnvelopeFacts.md): Closed value-bearing, redacted, non-authorizing verified envelope facts.
  - [BoundedAuthorityProtocol.V2.Grant](BoundedAuthorityProtocol.V2.Grant.md): Closed deterministic grant producer input.
  - [BoundedAuthorityProtocol.V2.GrantFacts](BoundedAuthorityProtocol.V2.GrantFacts.md): Closed value-bearing, redacted, non-authorizing verified grant facts.
  - [BoundedAuthorityProtocol.V2.KeyTransitionFacts](BoundedAuthorityProtocol.V2.KeyTransitionFacts.md): Closed redacted non-authorizing authenticated key-transition facts.
  - [BoundedAuthorityProtocol.V2.Operation](BoundedAuthorityProtocol.V2.Operation.md): Closed producer input for one named operation and its ordered selectors.
  - [BoundedAuthorityProtocol.V2.Proof](BoundedAuthorityProtocol.V2.Proof.md): Closed deterministic holder-proof producer input.
  - [BoundedAuthorityProtocol.V2.Selector](BoundedAuthorityProtocol.V2.Selector.md): Closed selector type used by `BoundedAuthorityProtocol.V2.Operation`.

- Contract-major 3
  - [BoundedAuthorityProtocol.V3](BoundedAuthorityProtocol.V3.md): Explicit entry point for the v3 wire profile (contract-major 3, the
[`BAP3-ES256-SHA256`](../docs/design/registries.md) suite).
  - [BoundedAuthorityProtocol.V3.AnchorFacts](BoundedAuthorityProtocol.V3.AnchorFacts.md): Closed redacted non-authorizing historical-anchor facts.
  - [BoundedAuthorityProtocol.V3.AnchoredExportFacts](BoundedAuthorityProtocol.V3.AnchoredExportFacts.md): Closed redacted non-authorizing atomic anchored-export facts.
  - [BoundedAuthorityProtocol.V3.ChainFacts](BoundedAuthorityProtocol.V3.ChainFacts.md): Closed redacted non-authorizing consumption-chain facts.
  - [BoundedAuthorityProtocol.V3.DecodedGrant](BoundedAuthorityProtocol.V3.DecodedGrant.md): Closed bounded decoded grant with explicitly unevaluated verification.
  - [BoundedAuthorityProtocol.V3.DecodedProof](BoundedAuthorityProtocol.V3.DecodedProof.md): Closed bounded decoded proof with explicitly unevaluated verification.
  - [BoundedAuthorityProtocol.V3.EcJwk](BoundedAuthorityProtocol.V3.EcJwk.md): Exact public P-256 EC JWK encoding, decoding, and RFC 7638 thumbprints for
the `BAP3-ES256-SHA256` suite.
  - [BoundedAuthorityProtocol.V3.EnvelopeFacts](BoundedAuthorityProtocol.V3.EnvelopeFacts.md): Closed value-bearing, redacted, non-authorizing verified envelope facts.
  - [BoundedAuthorityProtocol.V3.Grant](BoundedAuthorityProtocol.V3.Grant.md): Closed deterministic grant producer input.
  - [BoundedAuthorityProtocol.V3.GrantFacts](BoundedAuthorityProtocol.V3.GrantFacts.md): Closed value-bearing, redacted, non-authorizing verified grant facts.
  - [BoundedAuthorityProtocol.V3.KeyTransitionFacts](BoundedAuthorityProtocol.V3.KeyTransitionFacts.md): Closed redacted non-authorizing authenticated key-transition facts.
  - [BoundedAuthorityProtocol.V3.Operation](BoundedAuthorityProtocol.V3.Operation.md): Closed producer input for one named operation and its ordered selectors.
  - [BoundedAuthorityProtocol.V3.Proof](BoundedAuthorityProtocol.V3.Proof.md): Closed deterministic holder-proof producer input.
  - [BoundedAuthorityProtocol.V3.Selector](BoundedAuthorityProtocol.V3.Selector.md): Closed selector type used by `BoundedAuthorityProtocol.V3.Operation`.

- Signature suites
  - [BoundedAuthorityProtocol.Ed25519](BoundedAuthorityProtocol.Ed25519.md): Strict Ed25519 verification and public-key acceptance (rule S1).
  - [BoundedAuthorityProtocol.Es256](BoundedAuthorityProtocol.Es256.md): ES256 (ECDSA P-256 with SHA-256) signature canonicality, public-key acceptance, strict
verification, and producer utilities for the `BAP3-ES256-SHA256` suite.

- Sibling profiles
  - [BoundedAuthorityProtocol.ApplicationProfile.LocalLoopbackHttp.V1](BoundedAuthorityProtocol.ApplicationProfile.LocalLoopbackHttp.V1.md): Explicit entry point for the byte-distinct local-loopback HTTP application proof profile.
  - [BoundedAuthorityProtocol.ContentAssertion.V1](BoundedAuthorityProtocol.ContentAssertion.V1.md): Explicit standalone content-assertion profile: signatures bind exact content digests,
caller-supplied context and a bounded window. Verification never grants authority.
The caller owns content semantics, trusted key selection, replay and durable lineage state.

  - [BoundedAuthorityProtocol.ContentAssertion.V1.ContentAssertion](BoundedAuthorityProtocol.ContentAssertion.V1.ContentAssertion.md): Producer inputs for a standalone digest-bound content assertion.
  - [BoundedAuthorityProtocol.ContentAssertion.V1.ContentAssertionFacts](BoundedAuthorityProtocol.ContentAssertion.V1.ContentAssertionFacts.md): Non-authorizing verified content assertion facts; caller owns trust and persistence.
  - [BoundedAuthorityProtocol.ContentAssertion.V1.DecodedContentAssertion](BoundedAuthorityProtocol.ContentAssertion.V1.DecodedContentAssertion.md): Untrusted bounded content assertion fields; decoding establishes no signature or trust.
  - [BoundedAuthorityProtocol.ContentAssertion.V1.ExpectedContentAssertion](BoundedAuthorityProtocol.ContentAssertion.V1.ExpectedContentAssertion.md): Explicit trusted key, exact context, content digest, time and bounds.
  - [BoundedAuthorityProtocol.RoleAttestation.V1](BoundedAuthorityProtocol.RoleAttestation.V1.md): Explicit entry point for the byte-distinct role-attestation profile (bap-role-attestation/1).
  - [BoundedAuthorityProtocol.RoleAttestation.V1.AttestationFacts](BoundedAuthorityProtocol.RoleAttestation.V1.AttestationFacts.md): Closed value-bearing, redacted, non-authorizing verified role-attestation facts.
  - [BoundedAuthorityProtocol.RoleAttestation.V1.DecodedAttestation](BoundedAuthorityProtocol.RoleAttestation.V1.DecodedAttestation.md): Closed bounded decode of one role attestation without trust evaluation.
  - [BoundedAuthorityProtocol.RoleAttestation.V1.ExpectedAttestation](BoundedAuthorityProtocol.RoleAttestation.V1.ExpectedAttestation.md): Exact expected context for one role attestation: attestor trust, subject binding, now, bounds.
  - [BoundedAuthorityProtocol.RoleAttestation.V1.RoleAttestation](BoundedAuthorityProtocol.RoleAttestation.V1.RoleAttestation.md): One producer-side role attestation: an attestor key binding a subject key to a role.

- Conformance
  - [BoundedAuthorityProtocol.Conformance.Cli](BoundedAuthorityProtocol.Conformance.Cli.md): Deterministic offline verifier CLI for every packaged conformance corpus.