Skip to content

Changelog — HARP

Changelog

Version history of the HARP specification suite.

  • Artifact canonical JSON format defined
  • SHA-256 hashing over signable form
  • Ed25519 decision signatures
  • Replay protection via nonce + expiry + cache
  • Fail-closed enforcement model
  • Prompt classification taxonomy
  • Prompt hash computation
  • Metadata tagging for prompt artifacts
  • Session lifecycle (create, snapshot, close)
  • Snapshot hashing
  • Session state management
  • Gateway message routing
  • E2E encryption (X25519 + AEAD)
  • Zero-knowledge relay design
  • Key generation and device binding
  • Key rotation recommendations
  • Hardware-backed storage guidance
  • Threat analysis for all protocol components
  • Mitigation requirements
  • Out-of-scope threats documented
  • Specification governance process
  • Versioning and extension rules
  • Conformance levels defined
  • Test vector requirements

HARP-RECIPIENT-WRAP / HARP-APPROVAL-SET v0.2 Draft

Section titled “HARP-RECIPIENT-WRAP / HARP-APPROVAL-SET v0.2 Draft”
  • Per-device DEK wrap (aes-256-gcm+hpke-x25519-v1); gateway never holds the DEK
  • Frozen ApprovalSet snapshot; firstValid and count wait
  • GET /v1/recipient-keys public directory; key-directory substitution documented in THREATMODEL
  • 1:1 AES-256-GCM / pairing profile unchanged