Changelog

0.1.1 (2026-10-30)

Renamed ProofID 101 (formerly Identity 101), so the name is unique to proof. Repository renamed PP-SPEC-083-PROOFID-101. No normative change.

Initial draft of PP-SPEC-083, ProofID 101.
Everything in a run has an identity: arena, interfaces, ingress and egress points, traffic pipe, targets, attacker agents and release drivers, sensors, Witness, Issuer, Adjudicator, Signer, Registry, Time Anchor, operators, and Subjects (Section 5).
Testers sign; subjects are fingerprinted. No Subject is issued a signing key by the run (Section 4).
One Arena Identity certifies every component the Arena Operator runs; Independent Roots for the Witness, Registry, Time Anchor, and reproof Party Sets stay outside it (Section 6).
Ownership, storage (private keys under IP-10 custody, never inside the environment under test), access, and mutual authentication (Sections 7 to 9).
Scope as authorization, bound to Integration Points; Delegated Credentials for agents bound to the Declared Policy and revoked at teardown (Section 10).
Every record names its emitter, Subject, Capture Point, and arena; asserted versus captured Subject identity, with identity_mismatch findings (Section 11).
Identity Record and Identity Manifest, with schemas and examples; what is pulled before release and pushed during the run and at teardown (Sections 12, 13).
Reproof on new identities, compared by fingerprint, never by instance (Section 14). Lifecycle (Section 15).
License: Proof Protocol License 1.1. Specification text is CC BY 4.0 from this version, the first version (LICENSE.md Part A6(c)).