IdentityMapper v0.40.0

External implementation experiment checkpoint. Adds docs/external-implementation-experiment.md, defining a protocol documentation experiment for implementing a minimal FakeToken Source Provider, Demo Target Identity Mapper, and Demo Target Identity Resolver without reading the Python reference source code. Defines allowed documents, forbidden source/test access, required flow, required tests, forbidden shortcuts, expected report, and success/fail criteria. Core domain, capability contracts, runtime behavior, providers, and target mappers remain unchanged. Verified: 749 tests passed, 5 compliance tests passed, compileall OK.

IdentityMapper v0.36.1

Implementer's guide documentation patch. Adds docs/implementers-guide.md with practical guidance for writing compatible implementations without reading the Python source code. Documents source provider, target identity mapper, target identity resolver, credential handling, compliance checklist, forbidden shortcuts, and minimal implementation shape. Core domain, capability contracts, runtime behavior, providers, and target mappers remain unchanged. Verified: 749 tests passed, 5 compliance tests passed, compileall OK.

IdentityMapper v0.36.0

Compliance badge documentation checkpoint. Adds docs/compliance-badge.md, documents the IdentityMapper Protocol 1.0 Draft compliant claim, required statement fields, what the badge confirms, and what it does not confirm. Core domain, capability contracts, runtime behavior, providers, and target mappers remain unchanged. Verified: 749 tests passed, 5 compliance tests passed, compileall OK.

IdentityMapper v0.35.3

Protocol versioning RFC patch. Adds RFC 0003 for IdentityMapper Protocol Versioning, separates IdentityMapper Protocol 1.0 from the Python reference implementation version, documents major/minor protocol rules, implementation/document patch semantics, and breaking vs non-breaking protocol changes. Compliance suite now declares IdentityMapper Protocol 1.0 Draft as its target. Core domain, capability contracts, runtime behavior, providers, and target mappers remain unchanged. Verified: 749 tests passed, 5 compliance tests passed, compileall OK.

IdentityMapper v0.35.2

Compliance suite RFC patch. Adds RFC 0002 for the IdentityMapper Compliance Suite, documents required and optional compliance areas, forbidden behavior, expected artifacts, and links the RFC from README/docs. Core domain, capability contracts, runtime behavior, and providers remain unchanged. Verified: 749 tests passed, 5 compliance tests passed, compileall OK.

IdentityMapper v0.35.1

Protocol documentation and compliance layout patch.

• Added docs/rfcs/0001-identitymapper-protocol.md.
• Added an RFC index under docs/rfcs/.
• Added the initial compliance/ suite layout.
• Added transport-neutral compliance tests for Source Provider -> Identity -> TargetIdentity -> TargetIdentityResolution.
• Updated README and documentation index links.
• Kept the core domain, capability contracts, runtime behavior, and providers unchanged.
• Tests: 749 passed.
• Compliance tests: 5 passed.

IdentityMapper v0.35.0

Local OS user target lookup checkpoint.

• Added the local_user target world.
• Added LocalUserTargetIdentityMapper for projecting canonical Identity into a local OS user account shape.
• Added LocalUserTargetIdentityResolver for read-only local user lookup.
• Added LocalUserAccountDirectory, which uses the host OS user database on Unix/Linux through pwd.getpwnam().
• Registered local_user mapper and resolver in the --demo-basic runtime registry.
• Added local_user/matrix.json as the provider footprint.
• Extended the source-to-target projection contract matrix with local_user.
• Kept the target lookup credential-free: no password verification, no login, no bind, and no credential storage.
• Tests: 749 passed.

IdentityMapper v0.34.0

Target identity lookup checkpoint.

• Added TargetIdentityResolution as the read-only result of resolving a projected target identity.
• Added ResolveTargetIdentity and ResolveTargetIdentityRequest/Response.
• Added POST /resolve-target-identity to the Host Service.
• Added target resolver registration in the Host Service registry.
• Added a Windows / AD target resolver proof using an in-memory read-only target directory.
• Kept lookup separate from projection: Identity -> TargetIdentity -> TargetIdentityResolution.
• Kept the checkpoint credential-free on the target side: no bind, no password storage, no credential resolver, and no target login.
• Extended audit logging with target resolution metadata.
• Tests: 732 passed.

IdentityMapper v0.33.0

Demo Host Service target mapper wiring checkpoint.

• Registered basic and windows target identity mappers in the --demo-basic runtime registry.
• Verified the lab flow: basic proof -> canonical Identity -> basic/windows TargetIdentity.
• Kept the fix in runtime demo wiring only; no core domain, capability protocol, provider, or target mapper contract changes were required.
• Stabilized HTTP 413 payload_too_large responses on Windows by draining small rejected request bodies before closing the connection.
• Tests: 724 passed.

IdentityMapper v0.32.1

Protocol specification documentation patch.\n\n- Expanded docs/identitymapper-protocol.md into IdentityMapper Protocol 1.0 Draft.\n- Added source provider contract, target mapper contract, mapping rules, compatibility rules, identity invariants, and non-goals.\n- Added docs/compatibility-matrix.md with the verified 14 x 14 projection coverage.\n- Updated the README to state the protocol boundary and distinguish IdentityMapper from LDAP wrappers, OAuth wrappers, and authentication servers.\n- Tests: 723 passed.