Issue once
A nonce digest cannot be reused.
V0.46 CURRENT OWNER
Replay-resistant package challenges
A one-time content-free challenge binds origin, exact package and manifest, epochs, expiry and rollback evidence without becoming self-authentication.
Consume once
A response cannot be replayed.
Match exactly
Origin, package, manifest, deployment, configuration and key epochs must all match.
Keep outside
The receipt stays outside the package it authenticates.
EVIDENCE BOUNDARY
Local evidence and operational evidence remain separate.
Implemented locally
Canonical page, machine owner and executable local controls.
Not supplied or verified
External authorization, live package identity, operational execution, adoption and certification.
Exact status
PASS_LOCAL_WIP_
No participant judgment
Refusal, disagreement, expiry, revocation and rollback are technical states with participant-evaluation and standing effects NONE.
NO JUDGMENT WHATSOEVER. A technical condition is not a moral condition.