Claim Coverage (auto)

• Coverage: 100% (4/4)
• Generated: 2026-02-25T08:01:42+09:00 (JST)
• Matrix: docs/review/claim_coverage_matrix.md
• Lemma layer: enabled

Coverage History (auto)

Timestamp (JST)	Coverage	Covered/Total
2026-02-25T07:52:51+09:00	100%	4/4
2026-02-25T07:51:05+09:00	75%	3/4

QSP Stage199

Quantum-Safe Protocol — I-D v1.0 Fixed Specification

© 2025 Motohiro Suzuki

License: MIT

---

What Stage199 Is

Stage199 elevates QSP to a fixed specification.

• The protocol specification is frozen as Internet-Draft v1.0
• Security claims (A2–A5) are CI-bound and enforced fail-closed
• Claim status is computed from real GitHub Actions job results
• Any missing evidence or retrieval failure invalidates the claim (fail-closed)

This repository is intentionally split into:

• Fixed specification (normative)
• Dynamic evidence (generated by CI)

---

Fixed Specification (Normative)

• I-D v1.0 (Fixed): docs/id/v1.0/qsp-id-v1.0.md
• Integrity pin: docs/id/v1.0/sha256sums.txt

The file hash is pinned. If the I-D changes, the freeze check must fail.

---

Security Claims (Normative)

• A2: Replay Resistance
• A3: Downgrade Protection
• A4: Interoperability Safety
• A5: Rekey Integrity

Claims are not declared as “satisfied” by text. They are validated by CI jobs and evidence artifacts.

---

Dynamic Evidence (CI)

Dynamic / generated artifacts are stored outside the fixed I-D directory.

• Coverage / matrices / history:

  • docs/review/claim_coverage_matrix.md
  • docs/review/coverage_history.md
  • docs/review/coverage_history.json

• Dynamic claim_status (generated from real Actions results):

  • claim_status.json
  • claim_status.md

These are produced by workflows and published as GitHub Actions artifacts.

---

Fail-Closed Semantics

A claim is FAILED if:

• A required CI job fails
• Job results cannot be retrieved
• Required evidence artifacts are missing
• Parsing errors occur

This is intentional. “Unknown” is treated as “invalid”.

---

Repository Structure

• docs/id/v1.0/ — Fixed I-D v1.0 (normative, frozen)
• docs/review/ — Review / evidence outputs (dynamic)
• claims/ — Claim definitions and required job bindings
• tools/ — Generators (matrix / claim_status / gates)
• .github/workflows/ — CI that generates evidence and enforces gates
• tests/ — Freeze checks (I-D hash pin)

---

Workflows

• stage199-ci.yml — CI gate + evidence generation
• stage199-claim-status.yml — Dynamic claim_status computed from Actions job results
• claim-matrix.yml — Claim coverage matrix generation

---

License

MIT License © 2025 Motohiro Suzuki