Create with evidence: bind bytes, cite the rulebook, stamp continuity—then return a stamped result
Intent.
When a client creates or changes something, it should declare the rulebook, bind the exact on-wire bytes, and place the action in a single-link chain so the server (and any auditor) can replay integrity, order, and policy.
Sender (client) behavior.
# choose disclosure (prefer label-first) disclosure := "value+band" # value-only | value+band | full # declare canonical subset (ordered, visible) subset := ["value","band","manifest_id"] # add "align_ascii" only if align is public # hash the exact on-wire body bytes (if a body exists) BODY_HEAD := SHA256(raw_body_bytes_on_wire) # compute digest over declared bytes (+ body if declared) HEAD := SHA256( serialize(subset) [+ raw_body_bytes_on_wire] ) # emit continuity stamp (append-only, single-link) stamp := "SSMCLOCK1|<UTC_ISO>|nonce=<...>|sha256="+HEAD+"|prev=<HEX or NONE>" # payload invariance (collapse parity) phi((m,a)) = m
If full disclosure is required (optional).
# deterministic lane math (recap) a_c := clamp(a_raw, -1+eps_a, +1-eps_a) u := atanh(a_c) U += w*u ; W += w align := tanh( U / max(W, eps_w) ) # canonical decimal for public align align_ascii := "+0.732000" # fixed sign/precision; no locale separators
Receiver (server) behavior.
# 1) integrity over the exact bytes HEAD_local := SHA256(serialize_declared_subset(e) [+ raw_body_bytes_on_wire_if_declared]) assert HEAD_local == parsed_head_from(e.stamp) # 2) continuity (scope-local) assert e.stamp.prev == local_HEAD or e.stamp.prev == "NONE" local_HEAD := parsed_head_from(e.stamp) # 3) policy replay M := fetch_manifest(e.manifest_id) if align is public: a_c := clamp(a_raw, -1+eps_a, +1-eps_a) u := atanh(a_c) U += w*u ; W += w align_local := tanh( U / max(W, eps_w) ) assert cutpoint_map(align_local, M) == e.band else: assert band_is_derivable(e.band, M) # label-first # 4) commit effect, then return a stamped response (new prev links to request HEAD)
Illustrative HTTP exchange (minimal).
POST /api/create
SSMNET-Manifest: NETWORK_POSTURE.DEMO
SSMNET-Disclosure: value+band
SSMNET-Canonical-Subset: ["value","band","manifest_id"]
SSMNET-Body-Hash: sha256=<B_REQ>
SSMNET-Stamp: SSMCLOCK1|2025-11-10T13:20:00Z|nA|sha256=<H_REQ>|prev=NONE
{ "value": { "title": "hello", "owner": "demo" } }
HTTP/1.1 201 Created
Location: /api/item/42
SSMNET-Manifest: NETWORK_POSTURE.DEMO
SSMNET-Band: A0
SSMNET-Canonical-Subset: ["value","band","manifest_id"]
SSMNET-Body-Hash: sha256=<B_RES>
SSMNET-Stamp: SSMCLOCK1|2025-11-10T13:20:01Z|nB|sha256=<H_RES>|prev=<H_REQ>
{ "value": { "id": 42, "status": "created" } }
Outcome.
Two stamps narrate the transaction—submission and creation—forming a replayable, append-only story with unchanged payload bytes, verified subset integrity, and manifest-mapped duty-of-care.
Navigation
Previous: SSM-NET — Public GET (6A)
Next: SSM-NET — Mirror/CDN, Streaming frame, Evidence pack (6C–6E)