HERALD v0.2 — Collated work index
Collation date: 2026-05-05 (initial); updated post-cohort-1-completion.
Scope: all design-grade artifacts produced during the cohort-1 manthan run, promoted from manthan/state/findings/ into their canonical homes.
Cohort-1 final state: 85 done / 1 claimed / 0 pending — system run wound down with a single live claim at the time of this update.
This document is an index. The artifacts themselves live in the directories listed below.
Canonical specification documents
The four foundation documents at the project root:
SPEC.md— minimal core protocol (envelopes, sigils, signatures, verification). v0.2 normative.EXT.md— protocol-layer extensions (audit logs, Heralds, capability manifests, multi-signature, refusal, discovery, domain-separation registry).CHARTER.md— cultural / aesthetic dimension (attestation library, lifecycle rituals, conduit roles, reserved sigils, glossary).THREATS.md— consolidated threat model (per-attack walkthroughs, mechanism abuses, residual risks).
These were patched in-place during cohort-1 (D-306, D-308, D-311, D-303). The current v0.2 state passes the cross-document consistency audit (D-303).
Audits — audits/
Cross-cutting analyses, threat coverage, citation reconciliation, and post-mortems.
| File | Task | Topic |
|---|---|---|
threat-coverage.md | D-302 | Per-attack matrix mapping THREATS to SPEC/EXT defences |
spec-v0.2-audit.md | D-301 | Independent v0.2 audit |
threats-citation-fix.md | D-306 | THREATS citation drift reconciliation (94 substitutions across two passes) |
dom-sep-version-fix.md | D-308 | Domain-separation tag versioning (.v1 canonical) |
scope-string-fix.md | D-311 | Signature scope identifier unification (underscored canonical) |
model-hash-naming-fix.md | D-309 | model_hash ↔ lineage_training reconciliation |
attestation-shape-fix.md | D-312 | dream/silence/quorum_membership/revoke_capability_manifest shapes |
reserved-sigil-hygiene.md | D-314 | sigil:confessor_general, sigil:duress_witness, claim-rejection rule |
systemic-risk-matrix.md | D-307 | 13 ecosystem-level systemic risks across 6 clusters |
charter-revision.md | D-313 | CHARTER revision: apprenticeship, succession_challenge, verdict, 7 lifecycle envelope schemas |
cross-doc-consistency.md | D-303 | Final canon-coherence audit |
t001-t003-interop.md | D-316 | Test-vector ↔ TS reference lib interop validation |
manthan-cohort1-postmortem.md | D-315 | Cohort-1 lessons learned and improvement proposals |
second-team-review.md | D-304 | Brief for fresh-agent re-implementation pass |
spec-6-verdict-fix.md | D-319 | SPEC §6 verifier verdict registry (closes T-001 INTERPRETATION I-4) |
conformance-vectors-regen.md | D-318 | Conformance test vector regeneration audit |
inverse-coverage.md | T-022 | Inverse coverage analysis (worker-glossary discovery) |
glossary-cross-references.md | T-019 | Glossary terminology cross-reference report |
Registries — registries/
Canonical normative registries.
| File | Task | Topic |
|---|---|---|
standard-attestations.md | T-012 | Standard attestation JSON Schemas (lifecycle, content, reflective, protocol-event) |
cultural-attestations.md | T-013 | CHARTER attestation library JSON Schemas |
reserved-sigils.md | T-016 | 12 CHARTER sigils + 3 admin namespaces (test:, example:, reserved:*) |
refusal-reasons.md | D-310 | 23 refusal reason codes across 7 categories with legal_compulsion_undisclosed for gag-bound refusals |
diversity-policies.md | R-204 | Herald and conduit diversity policies for threshold attestations |
Templates — templates/
Fillable operator transparency documents.
| File | Task | Topic |
|---|---|---|
Herald-Charter.md | R-203 | 11-section Herald Charter template per EXT §3.5 |
LOTS.md | T-106 | Log Operator Transparency Statement template per EXT §2.6 |
Research — research/
Research-grade design notes proposing protocol shapes, surveys, and formulas. Non-normative until adopted.
| File | Task | Topic |
|---|---|---|
genesis-gossip.md | R-215 | Three-layer genesis-pinning gossip protocol for trace-fork detection |
m-of-n-timestamps.md | R-214 | Multi-conduit-receipt timestamping (default 2-of-3 for state transitions) |
patina-formula.md | R-216 | Reference patina formula with anti-farming defences (cross-cluster volume × diversity, gratitude with cluster discount, age, bestiary penalty, inheritance) |
zk-provenance.md | R-201 | ZK provenance proof libraries feasibility |
hpke-survey.md | R-202 | HPKE library availability across TS/Python/Go/Rust |
vendor-engagement.md | R-206 | Vendor-Herald engagement strategy (Anthropic/OpenAI/Google) |
sybil-economics.md | R-207 | Sybil-resistance economics |
dkim-analogy.md | R-208 | DKIM-analogy failure mode analysis |
time-locked-attestations.md | R-209 | VDF / threshold encryption / seal-keepers comparison |
quorum-agg.md | R-210 | BLS / Schnorr-MuSig / sequential-Ed25519 tradeoffs |
dialect-drift.md | R-211 | Dialect-drift detection literature + corpus design |
confession-alignment.md | R-212 | Confession booth as alignment infrastructure (k-anonymity, batched) |
model-hash-canonical.md | R-205 | Weight-canonicalisation across formats (safetensors/GGUF/HF/quantised/LoRA) |
memetic-fanout.md | R-213 | Memetic-fanout scoring algorithm sketch |
Library specifications — lib/
Schema-grade specs that implementations consume.
| File | Task | Topic |
|---|---|---|
lib/herald-ct-log/SCHEMA.md | T-101 | HERALD CT log wire format (RFC 6962-derived; STH/SCT/SIP, gossip, MMD) |
Reference services — services/
| Service | Task | Composition |
|---|---|---|
services/reference-herald/ | T-115 | Single-operator HERALD: Charter + CT log + lineage_endorsement issuance. Composes R-203 template, T-101 schema, T-102 CT log impl. ~280 LoC + 3/3 smoke tests pass |
services/the-scribe/ | T-124 | Cultural conduit exemplar: transcription/digest service per CHARTER §5.6 |
Test vectors — test-vectors/v0.2/
| Subject | Task |
|---|---|
| 7 conformance vectors with deterministic seeds | T-001 |
.v1 domain-separation tag (regenerated per D-308) | D-308 |
Documentation — docs/
| File | Task | Topic |
|---|---|---|
envelope-cheatsheet.md | T-018 | Quick-reference for envelope shape and verification |
verifier-codes.md | — | Verifier return-code catalogue |
Tools — tools/
| File | Task | Topic |
|---|---|---|
threats-citation-patch.py | D-306 | Re-runnable citation reconciliation script |
Implementation packages (integrated into canonical homes — see INTEGRATION-NOTES.md)
These are full code packages from external workers, since integrated into the production tree per INTEGRATION-NOTES.md. The list below records each task's source-of-origin in manthan/state/findings/ and where it lives now.
| Task | Worker | Surface |
|---|---|---|
| T-002 | worker-E | CBOR-deterministic profile (TS, 72 tests) |
| T-003 | codex-par | Envelope build/sign/verify reference (TS) |
| T-004 | codex-wave3 | Envelope reference (Python, TS interop) |
| T-005 | codex-par | Trace-parent binding validator |
| T-006 | codex-par | Nonce/replay cache |
| T-007 | codex-par | Domain-separation enforcement |
| T-008 | codex-par | Pass-through HTTP conduit |
| T-009 | worker-glossary | Flat-file audit log |
| T-010 | codex-par | herald verify CLI |
| T-014 | codex-par | Apologia signer-binding validator |
| T-015 | codex-par | Citation/derivation handler |
| T-017 | worker-glossary | Conformance test runner |
| T-021 | codex | Renderer-conformance distinct-rendering rule |
| T-022 | worker-glossary | (renderer/conformance task — see findings) |
| T-023 | codex-par | (TS lib task — see findings) |
| T-024 | worker-opus | Cultural-attestation conformance test extension |
| T-025 | worker-opus | (capability-related task) |
| T-026 | codex-wave3 | Reserved-sigil rejection conformance vectors |
| T-027 | worker-glossary | (conformance test — see findings) |
| T-103 | codex-wave3 | STH publication |
| T-104 | gemini-cli | SIP generation |
| T-105 | codex-wave3 | Consistency proof generation |
| T-109 | (claimed) | Multi-sig progressive signing |
| T-110 | codex-wave3 | Per-signature scope validation |
| T-111 | worker-glossary | Capability manifest with replay protection |
| T-112 | codex-20260505 | (capability-registry task) |
| T-113 | (claimed) | DNS TXT discovery resolver |
| T-114 | worker-opus | HPKE-bound whisper attestation |
| T-118 | worker-opus | Refusal envelope with rate publishing |
| T-119 | (claimed) | Black envelope / duress |
Cross-task discoveries (standalone findings)
| File | Source | Topic |
|---|---|---|
manthan/state/findings/D-305/feedback-intake.md | codex-feedback-intake | External-feedback intake process |
Cohort-1 manthan run summary
- Duration: ~2.5 hours wall clock, 2026-05-05 12:50Z – 15:18Z.
- Distinct worker identities: 9+ (driver-claude, worker-A/B/C/D/E, codex- family, worker-opus- family, worker-glossary-, gemini-cli-).
- Tasks shipped: 65 of 83 in TODO (78%); 6 in flight at collation time.
- Bugs found and fixed in flight: 6 (cataloged in
audits/manthan-cohort1-postmortem.md). - Coordination: atomic
mkdir-claim,perl -ipatching, file-based audit log. No double-execution; one observed dispatch race resolved correctly.
What's next
- Implementation integration pass. Move T-002..T-119 code packages from
manthan/state/findings/intolib/,demo/,services/,wrappers/per their canonical homes. This is non-trivial — packages have their own dependencies, tests, and conventions; need a coordinated integration task. - Spec-revision pass. Apply the spec patches surfaced by D-310 (refusal reason-codes), D-313 (succession_challenge, verdict, 7 lifecycle schemas), D-314 (sigil:confessor_general, sigil:duress_witness, claim-rejection rule), R-203 (
herald.charter.v1registration), T-106 (herald.lots.v1registration). All sit in the audits as proposed patches awaiting reviewer application. - Second-team re-implementation. Per D-304 brief; dispatch when reviewer is ready.
- Cohort-2 follow-on backlog. D-316..D-323 candidates surfaced across audits, with effort estimates ≤1 hour each.
— Collation index by driver-claude, 2026-05-05.