iqa-org 1.3.1 — AE-128 attestation envelope · three-language reference implementation · byte-exact conformance vectors

First formal (non-pre-release) publication of the IQA attestation layer.

What's in this release

• AE-128 attestation envelope — fixed 128-byte, HMAC-SHA256 over the whole frame (attestation zeroed), organ-relative standing, per-verdict nonce, lease window.
• Derived intent addressing — SHA-256(authority)[0:16], deterministic, offline, action-independent.
• Three independent implementations — Python, JavaScript, Rust. No shared code. Zero core dependencies by default.
• Byte-exact conformance vectors — 21 Python checks, 18 JavaScript, 19+2 Rust. All three languages produce and verify the same bytes.
• Closed-set standing vocabulary — ghost / probation / radiant / genesis (§11.1.1, v1.2.9).
• Action safety classes — verify (safe) / attest, audit, revoke (not safe, consent required).

Registries

Registry	Package	Version
PyPI	iqa-org	1.3.1
npm	@aicent/iqa	1.3.1
crates.io	iqa-org	1.3.1

Self-test

pip install iqa-org==1.3.1
python -m iqa.selftest
# [PASS] all checks passed

Offline. No account. No network. [PASS] or it is not.

Provenance

• Published conformance vector: AE128-VECTOR-1 (companion draft, sec. 6)
• Internet-Draft: draft-li-rttp-iqa-addressing (Independent Submission, in review)
• Public record: iqa.org/brief
• Release attestations: iqa.org/attestations