VSTD v1.5.0

Source tag signature status: SIGNED_AND_GITHUB_VERIFIED (valid).

Every uploaded asset has a GitHub artifact attestation. The generated distribution assets are bound to the exact public commit by the external release manifest. The platform-evidence ZIP has its own internal manifest and preserves the four raw environment records, JUnit documents, and reconstructed bounded reports from the explicitly selected successful main-branch run. The wheel and source distribution published to PyPI are the same tested files attached here. Verify a GitHub asset with:

gh attestation verify PATH_TO_ASSET --repo TimeLordRaps/verifier

Zero-Identity / Zero-Knowledge (ZIZK) Actor Identity Architecture

• Normative three-token specification (standard/VSTD-ZIZK-TOKENS.md) and schemas (vstd-birth-token-1, vstd-aging-token-1, vstd-lifetime-token-1, vstd-actor-binding-1).
• Enforce the ZIZK prime invariant: actor identity never substitutes for, upgrades, or shortcuts independent artifact verification.
• Provide zero-identity offline evaluation engine and comprehensive adversarial audit harness blocking 16 prohibited inference classes and 6 attack vectors.