Create with evidence: bind bytes, cite the rulebook, stamp continuity—then return a stamped result
Intent.
When a client creates or changes something, it should declare the rulebook, bind the exact on-wire bytes, and place the action in a single-link chain so the server (and any auditor) can replay integrity, order, and policy.
Sender (client) behavior.
# choose disclosure (prefer label-first)
disclosure := "value+band" # value-only | value+band | full
# declare canonical subset (ordered, visible)
subset := ["value","band","manifest_id"] # add "align_ascii" only if align is public
# hash the exact on-wire body bytes (if a body exists)
BODY_HEAD := SHA256(raw_body_bytes_on_wire)
# compute digest over declared bytes (+ body if declared)
HEAD := SHA256( serialize(subset) [+ raw_body_bytes_on_wire] )
# emit continuity stamp (append-only, single-link)
stamp := "SSMCLOCK1|<UTC_ISO>|nonce=<...>|sha256="+HEAD+"|prev=<HEX or NONE>"
# payload invariance (collapse parity)
phi((m,a)) = m
If full disclosure is required (optional).
# deterministic lane math (recap)
a_c := clamp(a_raw, -1+eps_a, +1-eps_a)
u := atanh(a_c)
U += w*u ; W += w
align := tanh( U / max(W, eps_w) )
# canonical decimal for public align
align_ascii := "+0.732000" # fixed sign/precision; no locale separators
Receiver (server) behavior.
# 1) integrity over the exact bytes
HEAD_local := SHA256(serialize_declared_subset(e) [+ raw_body_bytes_on_wire_if_declared])
assert HEAD_local == parsed_head_from(e.stamp)
# 2) continuity (scope-local)
assert e.stamp.prev == local_HEAD or e.stamp.prev == "NONE"
local_HEAD := parsed_head_from(e.stamp)
# 3) policy replay
M := fetch_manifest(e.manifest_id)
if align is public:
a_c := clamp(a_raw, -1+eps_a, +1-eps_a)
u := atanh(a_c)
U += w*u ; W += w
align_local := tanh( U / max(W, eps_w) )
assert cutpoint_map(align_local, M) == e.band
else:
assert band_is_derivable(e.band, M) # label-first
# 4) commit effect, then return a stamped response (new prev links to request HEAD)
Illustrative HTTP exchange (minimal).
POST /api/create
SSMNET-Manifest: NETWORK_POSTURE.DEMO
SSMNET-Disclosure: value+band
SSMNET-Canonical-Subset: ["value","band","manifest_id"]
SSMNET-Body-Hash: sha256=<B_REQ>
SSMNET-Stamp: SSMCLOCK1|2025-11-10T13:20:00Z|nA|sha256=<H_REQ>|prev=NONE
{ "value": { "title": "hello", "owner": "demo" } }
HTTP/1.1 201 Created
Location: /api/item/42
SSMNET-Manifest: NETWORK_POSTURE.DEMO
SSMNET-Band: A0
SSMNET-Canonical-Subset: ["value","band","manifest_id"]
SSMNET-Body-Hash: sha256=<B_RES>
SSMNET-Stamp: SSMCLOCK1|2025-11-10T13:20:01Z|nB|sha256=<H_RES>|prev=<H_REQ>
{ "value": { "id": 42, "status": "created" } }
Outcome.
Two stamps narrate the transaction—submission and creation—forming a replayable, append-only story with unchanged payload bytes, verified subset integrity, and manifest-mapped duty-of-care.
Navigation
Previous: SSM-NET — Public GET (6A)
Next: SSM-NET — Mirror/CDN, Streaming frame, Evidence pack (6C–6E)
SHUNYAYA 