ifc-fides:
- lead Label semantics with the load-bearing wire/host split (wire markers are
advisory hints; reader-set semantics are host-resolved)
- state the join asymmetry as principled, not incidental: integrity join is
total/wire-computable (small closed lattice); confidentiality join is partial
because public is the only wire-computable case (reader set = top), while
private join is the intersection the opaque markers don't carry
- frame wire opaqueness as a property of the security model, not a spec limitation
- add fail-closed handling when resolution is unavailable (ref absent, digest-only,
source unreachable): never treat opaque labels as equal or as public; unknown/
mixed provenance classifies private; resolved reader sets are not durable grants
trust-annotations:
- show jcs/rfc8785 alongside cbor/rfc8949 so canonicalization reads as a
per-reference envelope choice rather than a default
- note type/digest/canonicalization as the local-re-derivation minimum
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
4967a9eccc