Clear, byte-stable response shapes and safe caching rules
7C. Minimal response styles (illustrative)
Purpose. Show how these endpoints appear on the wire in simple, copy-ready forms. These examples are not new policy — they express the expected tone, shape, and byte stability.
Manifest (illustrative)
manifest_id: "TRANSPORT_POSTURE.DEMO"
bands:
- "A++": [-1.00, -0.80]
- "A0" : (-0.80, +0.60]
- "CRITICAL": (+0.60, +1.00]
boundary_inclusivity:
A++: left-inclusive, right-inclusive
A0: left-open, right-inclusive
eps_a: 1e-6
eps_w: 1e-9
weight_rule: equal
disclosure: value+band
cmp_tolerance: 1e-9
text_norm: "utf8_nfc"
assumptions: "Nominal sampling; no guaranteed rate enforcement."
Lane kernel (deterministic)
a_c := clamp(a_raw, -1+eps_a, +1-eps_a)
u := atanh(a_c)
U += w*u ; W += w
align := tanh( U / max(W, eps_w) )
Checkpoint (illustrative)
HEAD=1F3C4D...A902
scope=default
updated=2025-11-07T12:30:00Z
Evidence bundle layout (illustrative)
/evidence/
manifests.json
envelopes.jsonl
hashes.txt
checkpoint.txt
verify.sh
7D. Caching, integrity, and privacy
Caching
- Manifest (
/.well-known/ssmnet/manifest/<id>) SHOULD be cached long-term (immutable). - Checkpoint (
/.well-known/ssmnet/checkpoint) SHOULD use short TTL & conditional requests. - Evidence (
/.well-known/ssmnet/evidence) MAY use time/range filters; compression encouraged.
Integrity
# verify integrity of each envelope
HEAD_local := sha256( serialize(subset_fields) [+ raw_body_bytes_if_declared] )
assert HEAD_local == parsed_head_from(stamp)
hashes.txtlists the digests that stamps commit to.- All text used in hashing MUST be UTF-8 NFC to avoid digest drift.
Privacy
- Default label-first: publish value+band; keep align private unless explicitly declared.
- Canonical subsets SHOULD contain no PII.
- Posture conveys system state, not identity.
Navigation
Previous: SSM-NET — Well-known endpoints: Endpoints (7B)
Next: SSM-NET — Versioning & operational notes (7E–7F)