Substrate v5: RFC 8785 canonical adoption (binding v5)#30
Merged
Conversation
Mirror RFC 8785 v5 canonical dispatch, v5 payload building, PERMIT_V2 envelope dispatch, closure_v3 chain bytes, and v5 permit-decision recompute paths including wire-body mismatch detection. PERMIT_V2 reuses the parent permit binding_version as the envelope canonical version. closure_v3 is the verifier-recognized v5-era closure format to match the existing closure_v1/closure_v2 family. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds binding version v5 to the keel-verifier package using RFC 8785 JCS canonical bytes via the
rfc8785Python package. Substrate-wide cutover perSPEC_SUBSTRATE_V5_CANONICAL_RFC8785_v1_1_2026-06-04.md(in keel-api repo).Highlights
canonical_binding_bytes)_legacy_canonical_json_v1_to_v4preserved)permit.decision.v1claim with structured reject codes (permit.binding.v5.spend_scope_hash_mismatch,permit.binding.v5.delegation_policy_hash_mismatch,permit.binding.v5.wire_body_hash_mismatch)Test plan
pip install keel-verifier==3.2.0from fresh venv adjudicates a v5 fixture permit emitted by keel-api with byte-identical canonicalCompanion PR
keel-api substrate-v5 (separate PR, opens after this lands on PyPI per release sequence runbook stage 4).
Co-Authored-By: Claude Opus 4.7 (1M context) noreply@anthropic.com
🤖 Generated with Claude Code