Skip to content

v1.0.1 — initial standalone release

Choose a tag to compare

@githubscum githubscum released this 01 Jul 20:53

@aip-protocol/aip v1.0.1 — initial standalone release

The first standalone release of the AIP module, extracted from the host application. Brand-neutral: it does not depend on, refer to, or leak the identity of the host application.

Install

npm install github:githubscum/aip-protocol#v1.0.1

What's in this release

Spec↔code alignment

  • §4.2 message types: code now uses the 10 types named in spec (HANDSHAKE_OFFER, HANDSHAKE_REPLY, TASK, RESULT, ERROR, AUDIT, ROUTING_DECISION, KEY_ROTATION, REVOCATION, ACK)
  • §6 handshake: 2-step HANDSHAKE_OFFER / HANDSHAKE_REPLY (decision: "accept" | "reject") replaces the pre-1.0 4-step model
  • HandshakeStateMachine API: sendOffer() / sendReply(); runLocal() preserved
  • State machine constants: OFFER_SENT, REPLY_SENT, ESTABLISHED, REJECTED (matches spec §6.1)
  • §5.3.7: Groth16 (groth16-bn254-v1) permitted variant retained
  • JSDoc section references in src/constants.js corrected throughout

Brand-leak cleanup

  • IKE-SPEC-AIP-001 references removed from README, LICENSE, constants.js
  • "Ike Analytics" copyright replaced with "AIP Protocol contributors" in LICENSE
  • Stale 4-message model references removed from JSDoc across src/handshake.js, src/messageEnvelope.js, src/peerRegistry.js, tests/handshake.test.js

Governance

  • README.md: real install path, corrected spec TOC, status line
  • SECURITY.md: vulnerability disclosure policy
  • CONTRIBUTING.md: PR process + brand-neutrality requirement
  • KNOWN-LIMITS.md: explicit v1.0.1 scope (single-party ceremony, Groth16 placeholder, etc.)
  • CHANGELOG.md

Bug fixes

  • attestation.js JSDoc: removed contradiction between "placeholder test circuit" and "v0.3: real circuit" — current status is "Groth16 permitted variant; full aip-attest-v1 circuit is the v1.1 follow-up"
  • messageEnvelope.js: HELLO reference corrected to HANDSHAKE_OFFER
  • peerRegistry.js: JSDoc HELLOHANDSHAKE_OFFER

Verified

  • npm test10/10 (6 attestation + 4 handshake)
  • npm run smoke14/14 (brand-neutrality, tests, public API surface, circuit artifacts)
  • src/ brand-neutrality CI — clean
  • PSP (host application) integration smoke — 18/18 with file: install

Out of scope (deferred to v1.1+)

  • Halo2 / BN254 / IPA normative proving system
  • Community Powers-of-Tau ceremony (aip-pots-v1 is single-party)
  • Full aip-attest-v1 Poseidon-Merkle-in-circuit implementation
  • Remote peer resolution (wire-level)
  • LIGHTWEIGHT_HANDSHAKE interop mode (§6.5)
  • Production routing layer (§11)
  • Public npm publish