GoodShyt Group Inc.

San Francisco CA US deonte@goodshyt.fun https://orcid.org/0009-0005-8586-3650

verification conformance evidence reproducibility agentic systems Protocol implementations frequently combine specification checks, deterministic test vectors, security testing, independent reproduction, and release decisions. A common failure mode is evidence collapse: a result at one assurance level is silently treated as sufficient for a stronger conclusion. This document defines Verification Promotion Boundaries (VPB), a machine-readable profile and state-transition procedure that separates specification validation, local conformance, independent reproduction, authorized security testing, and release eligibility. VPB also defines dual-state handling for specification defects: detecting a bad normative vector is negative evidence about the tested subject but may be positive fault-detection evidence about the verifier. Unknown evidence never promotes. This document does not define a new cryptographic primitive, authorization protocol, or IETF certification program.

Introduction Protocol research often moves through several evidence classes: a document is written, an implementation passes local vectors, another implementation reproduces the result, security testing is performed, and a human release authority decides whether deployment is appropriate. These states are not interchangeable. VPB formalizes the non-collapse rule: a result produced for one assurance class MUST NOT be represented as satisfying a stronger assurance class unless evidence required by the stronger class is present. The profile is designed for laboratories that validate portfolios of related Internet-Drafts or experimental protocol specifications, but it is protocol-neutral. A motivating case is arithmetic conformance. A verifier can correctly reject a published elliptic-curve point that does not satisfy the declared curve equation. That outcome is a failure of the tested vector, not a failure of the verifier. VPB therefore keeps subject status separate from verifier-evidence status.

Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals.

Terminology

Subject

The specification, implementation, vector set, build, or release candidate being evaluated.

Verifier

The implementation that executes a declared verification procedure.

Promotion

A transition to a stronger assurance stage.

Specification Vector Failure

A reproducible finding that a published expected value or normative test input is inconsistent with the specification it is intended to represent.

Independent Reproduction

A reproduction performed by a producer and implementation distinct from the producer and implementation whose local result is being reproduced.

Promotion Stages VPB defines the following ordered stages: REGISTERED, SPEC_VALIDATED, LOCAL_CONFORMANT, INDEPENDENTLY_REPRODUCED, SECURITY_TESTED, and RELEASE_ELIGIBLE. REGISTERED means only that the subject and its digests are known. SPEC_VALIDATED means required specification preconditions and vector definitions are internally consistent. LOCAL_CONFORMANT means the declared local conformance suite passed in a characterized environment. INDEPENDENTLY_REPRODUCED requires a distinct producer and implementation to reproduce the registered result. SECURITY_TESTED additionally requires authorized penetration testing and fault injection. RELEASE_ELIGIBLE additionally requires signed provenance, no unresolved high-severity finding, and explicit human approval. No stage implies a later stage. A relying party MUST NOT infer independent reproduction from a local PASS, or production readiness from independent reproduction.

Verification Outcomes Each required check has one outcome: PASS, SUBJECT_FAIL, SPEC_VECTOR_FAIL, INDETERMINATE, INTEGRITY_FAIL, or ENVIRONMENT_FAIL. INDETERMINATE MUST NOT be interpreted as PASS. INTEGRITY_FAIL terminates evaluation of the affected receipt. SPEC_VECTOR_FAIL blocks conformance promotion of the subject.

Dual Subject and Verifier Evidence A verifier that reports SPEC_VECTOR_FAIL has made a negative claim about the tested subject. If the defect is independently reproducible, the same event MAY be recorded as SPECIFICATION_DEFECT_DETECTED in the verifier's evidence ledger. This rule prevents a useful failure from being flattened into a generic test failure. The subject remains blocked. The verifier gains only evidence of the specific demonstrated fault-detection capability. It does not gain independent-reproduction, security, release, or certification status. Formally, SubjectState and VerifierEvidenceState are separate variables. A transition in one MUST NOT implicitly change the other.

VPB Receipt A VPB receipt is a JSON object. Implementations MUST use RFC 8785 canonicalization before computing interoperable receipt digests . SHA-256 MAY be used for content digests as specified in . The receipt contains a profile identifier, receipt identifier, subject identifier and digest, verification-procedure digest, vector-set digest, environment digest, producer identifier, requested promotion stage, per-check outcomes, independence assertions, security-testing assertions, human approval, signed-provenance state, unresolved-high-severity count, and predecessor-receipt digests. The JSON representation MUST conform to the companion schema for this profile. Unknown or omitted required evidence MUST fail closed for the requested promotion.

Promotion Algorithm

1. Validate the receipt syntax and canonical form.
2. If any integrity check fails, return INTEGRITY_FAIL and grant no promotion.
3. If required evidence is unknown, including an unknown environment, return INDETERMINATE and grant no promotion.
4. If any required check is SUBJECT_FAIL, SPEC_VECTOR_FAIL, or ENVIRONMENT_FAIL, block subject promotion. A SPEC_VECTOR_FAIL MAY additionally create verifier evidence as described in .
5. Grant LOCAL_CONFORMANT only if every required registered check is PASS.
6. Grant INDEPENDENTLY_REPRODUCED only when the reproducing producer and implementation are distinct from the original producer and implementation.
7. Grant SECURITY_TESTED only when both authorized penetration testing and fault injection are complete.
8. Grant RELEASE_ELIGIBLE only when signed provenance is complete, unresolved high-severity findings equal zero, and a human release authority explicitly approves.

Conformance and Falsification A VPB implementation claiming conformance MUST reproduce the normative results in the companion test-vector set. The vectors include local PASS without independent reproduction, specification-vector failure, unknown environment, insufficient independence, missing fault injection, missing human approval, unresolved high-severity findings, and integrity failure. The core falsifiers are direct. If a local PASS is promoted to INDEPENDENTLY_REPRODUCED without independent evidence, the implementation is non-conformant. If SPEC_VECTOR_FAIL is treated as subject conformance, it is non-conformant. If INDETERMINATE is promoted as PASS, it is non-conformant.

Relationship to Existing Work RFC 9943 defines a transparency architecture for signed statements and receipts . VPB does not replace transparency services or receipt cryptography; it defines promotion semantics across verification stages. The Correctover Runtime Verification Receipt Internet-Draft specifies a receipt for runtime verification of agent tool invocations . VPB addresses a different lifecycle question: what evidence is sufficient to promote a subject from one verification stage to another. Revocation-closure work defines when invalidated authority is no longer usable across declared paths . VPB does not define revocation closure; it defines when verification evidence may support stronger assurance claims.

Security Considerations Expected outputs MUST NOT be generated solely by the implementation under test. Security-critical vectors SHOULD be derived or checked by an independent oracle or independent implementation. Receipt integrity authenticates bytes, not truth. A signed receipt can preserve an incorrect conclusion. Consumers must evaluate the procedure, vector provenance, independence class, and environment. This profile does not authorize penetration testing against third-party systems. Internet-Draft conformance is not IETF certification, standards adoption, patent validity, or production-security assurance.

IPR and Research Claims This document does not assert patentability, priority, freedom to operate, or ownership of established algorithms. IETF participants remain responsible for applicable IPR disclosure obligations under BCP 79 . Technical novelty and patentability analysis belongs outside the normative conformance result.

IANA Considerations This document has no IANA actions.

Normative References Informative References