statecraft.
Catalog/statecraft-cli

035-offline-issuer-contract

Offline issuer authorization: three fixed domains, detached owner signatures and the pinned RootSetV2

Lifecycle approvedImplementation completeVerification unknownQualification unknown

Amends 005 for the shared half of the offline issuer enrollment contract the owner approved on 2026-10-03 (docs/proposals/007-offline-enrolment-contract.md). Adds three closed signing domains (trust.issuer-enrolment, trust.issuer-rotation, trust.issuer-revocation) under the unchanged family preimage, strict key, signature and payload decoding, the detached signature and owner public records, the RootSetV2 reader with its digest and complete history verification, issuer eligibility at an explicit time and scope, and the operator version and digest pin that refuses rollback. The envelope crate stays pure: no file, clock, entropy or network. Custody and the offline verbs are 036's; adoption in a cell is the platform's.

Read the full pinned specification ↗

Relationships

Claimed units

  • extends
    {
  "nature": "additive",
  "spec": "005-acceptance-and-evidence",
  "unit": {
    "kind": "directory",
    "path": "crates/statecraft-envelope/"
  }
}

Source headings

  1. 035: Offline issuer authorization
  2. 1. Purpose
  3. 2. Territory
  4. 3. Behavior
  5. 3.1 Domains and strict encodings
  6. 3.2 Payloads
  7. 3.3 Detached records
  8. 3.4 RootSetV2
  9. 3.5 Eligibility
  10. 3.6 Operator pin
  11. 3.7 The boundary reader
  12. 4. Out of scope
  13. 5. Resolved decisions
  14. Verification

Frozen anchors

No frozen anchors declared.