From bac77a3817f35d5141c755e2f61a93d0cf6be408 Mon Sep 17 00:00:00 2001 From: forkwright Date: Wed, 26 Aug 2026 16:22:33 -0500 Subject: [PATCH] docs(akroasis): correct Sphragis verification profile --- docs/MANIFEST.toml | 7 +++++-- docs/pq-content-key-wrapping.md | 7 ++++++- 2 files changed, 11 insertions(+), 3 deletions(-) diff --git a/docs/MANIFEST.toml b/docs/MANIFEST.toml index 0f2daf6..43cb7c6 100644 --- a/docs/MANIFEST.toml +++ b/docs/MANIFEST.toml @@ -37,16 +37,19 @@ type = "authored" evergreen = false description = "Layout of the long-term offline reference store and its ownership boundary." +# WHY not evergreen: both living boundary documents report current +# implementation, adoption, and promotion state that changes as the underlying +# work advances. [[doc]] path = "docs/fjall-column-encryption.md" type = "authored" -evergreen = true +evergreen = false description = "Corrected Pinax/Akroasis authority boundary for reference-library encryption." [[doc]] path = "docs/pq-content-key-wrapping.md" type = "authored" -evergreen = true +evergreen = false description = "Living Sphragis boundary and promotion gates for future content-key distribution." # WHY authored and not generated: it is a hand-written example config a reader copies from, not output diff --git a/docs/pq-content-key-wrapping.md b/docs/pq-content-key-wrapping.md index 54f7fc3..614209d 100644 --- a/docs/pq-content-key-wrapping.md +++ b/docs/pq-content-key-wrapping.md @@ -46,5 +46,10 @@ Sphragis checkout at the exact immutable revision recorded by the consumer, or use Sphragis CI for that same revision: ```sh -cargo test --features preview-pq +cargo test --features preview-pq,hazmat ``` + +Here `hazmat` is enabled only in the producer checkout so Sphragis's +conformance-test primitive surface is reachable. It does not change the +consumer boundary above: an Akroasis dependency must not enable `hazmat`, and +Akroasis code must not call that surface.