Rosetta Protocol 3.0.0 - Core 1.0 Standards Candidate

Rosetta Protocol 3.0.0 - Core 1.0 Standards Candidate

This release establishes Rosetta Core as a protocol-independent safety transaction standard and
ships the Python reference implementation, MCP/A2A bindings, conformance corpus, Guard/Reflex
integration, signed evidence, and reproducible validation tooling.

Highlights

• Structured intent, independently observed requests, request-bound authorization, policy
  decisions, pre-forward enforcement, and effect receipts
• Attenuating capability delegation, ancestor revocation, and fencing
• SPIFFE, OAuth RAR, OPA, CloudEvents, OpenTelemetry, and in-toto-style mappings
• MCP namespaced _meta extension and A2A URI extension bindings
• 23 normative JSON Schemas and 12 language-independent conformance vectors
• 326 automated tests and 85.55% branch-aware coverage in the immutable release
• Signed 5,000-iteration API-free experiment evidence
• Research reference gateways and gradual observe/shadow/enforce/federated modes

Status

This is a research standards candidate and reference implementation. It is not production
certification, a universal safety guarantee, or proof that arbitrary covert communication can be
detected. See RESIDUAL_RISKS.md and docs/limitations.md.