AINRA v0.3.0 — a fourth independent verifier · self-serve conformance · signed releases

A fourth independent verifier · self-serve conformance · signed releases.

What this release proves. Four independently written implementations — the Rust core, the TypeScript SDK, the reference CLI, and a new Python verifier written from the Standard alone — agree byte-for-byte on 745/745 passport + 17/17 delta + 9/9 directory conformance vectors, on verdict and named reason. The full 18-row preflight board ran ALL GREEN from a clean clone at this exact commit (docs/releases/v0.3.0-board.md), and again from a pristine credential-less container cloning this public repository (docs/releases/stranger-test-2026-07-31.md).

The self-serve conformance programme. tools/conformance/ + docs/conformance/PROGRAMME.md: a language-agnostic runner any third party points at their own implementation over a documented stdin/stdout contract. Proven both ways — three real implementations pass clean; a deliberately sabotaged one is caught with 66 named divergences. Implementers self-attest with their own key; anyone re-runs the corpus and checks. We don't certify implementations — we make certification unnecessary.

Supply-chain trust (D-042). The attached SHA256SUMS is signed with the project's offline SSH Ed25519 release key (public half: release/ainra-release.pub, fingerprint SHA256:V1ZbCNdPDEe5plpYq07dGCsoensF4Q+MPPQQkcj5pi4). provenance.json (SLSA-shaped) and sbom.json (CycloneDX) describe exactly what was built from what. Verify everything with the four-step guide in RELEASE-VERIFY.md — the strongest check, rebuilding the corpus byte-for-byte from this tag, needs no key at all.

Honest status. The three real-world genesis rows — a recorded public ceremony with independent custodians, ≥3 external verifiers, a 14-day 3-region soak — remain pending; the machinery for all three is built and rehearsed. The staging network runs on a TEST-ROOT; production log entries sealed: 0.

Full changelog: CHANGELOG.md → [v0.3.0].