SSM-NET — Well-known endpoints (7C–7D)

Clear, byte-stable response shapes and safe caching rules

7C. Minimal response styles (illustrative)

Purpose. Show how these endpoints appear on the wire in simple, copy-ready forms. These examples are not new policy — they express the expected tone, shape, and byte stability.

Manifest (illustrative)

manifest_id: "TRANSPORT_POSTURE.DEMO"
bands:
  - "A++": [-1.00, -0.80]
  - "A0" : (-0.80, +0.60]
  - "CRITICAL": (+0.60, +1.00]
boundary_inclusivity:
  A++: left-inclusive, right-inclusive
  A0:  left-open, right-inclusive
eps_a: 1e-6
eps_w: 1e-9
weight_rule: equal
disclosure: value+band
cmp_tolerance: 1e-9
text_norm: "utf8_nfc"
assumptions: "Nominal sampling; no guaranteed rate enforcement."

Lane kernel (deterministic)

a_c := clamp(a_raw, -1+eps_a, +1-eps_a)
u   := atanh(a_c)
U  += w*u ; W += w
align := tanh( U / max(W, eps_w) )

Checkpoint (illustrative)

HEAD=1F3C4D...A902
scope=default
updated=2025-11-07T12:30:00Z

Evidence bundle layout (illustrative)

/evidence/
  manifests.json
  envelopes.jsonl
  hashes.txt
  checkpoint.txt
  verify.sh

7D. Caching, integrity, and privacy

Caching

Manifest (/.well-known/ssmnet/manifest/<id>) SHOULD be cached long-term (immutable).
Checkpoint (/.well-known/ssmnet/checkpoint) SHOULD use short TTL & conditional requests.
Evidence (/.well-known/ssmnet/evidence) MAY use time/range filters; compression encouraged.

Integrity

# verify integrity of each envelope
HEAD_local := sha256( serialize(subset_fields) [+ raw_body_bytes_if_declared] )
assert HEAD_local == parsed_head_from(stamp)

hashes.txt lists the digests that stamps commit to.
All text used in hashing MUST be UTF-8 NFC to avoid digest drift.

Privacy

Default label-first: publish value+band; keep align private unless explicitly declared.
Canonical subsets SHOULD contain no PII.
Posture conveys system state, not identity.

Navigation

Previous: SSM-NET — Well-known endpoints: Endpoints (7B)
Next: SSM-NET — Versioning & operational notes (7E–7F)