Goal
Retain proof artifacts with explicit privacy rules so Harpocrates remains privacy-preserving, interoperable, and safe at its public boundaries.
Scope
- Work within repository workflows, CLI/release tooling, deployment packaging, interoperability fixtures, and security operations.
- Reuse the existing canonical metadata, proof, contract, and deployment boundaries; do not create a second protocol truth.
- Define behavior for malformed, oversized, expired, revoked, unsupported, and dependency-failure inputs as applicable.
Acceptance criteria
- The requested behavior is available through the current interface without breaking compatible callers or stored evidence.
- Failure responses are stable and privacy-safe; real media, secrets, witness values, and private keys are never logged.
- Version, migration, threat-model, and compatibility notes are included when the change affects a protocol or artifact.
Test expectations
- Add focused positive, negative, boundary, and regression coverage. Add a reproducible command or CI fixture; do not use real sensitive media or credentials.
- Keep the relevant lint, typecheck, build, circuit, contract, and integration checks green.
Out of scope
- Unrelated dependency upgrades, real sensitive media, production credentials, broad visual redesigns, and undocumented protocol changes.
Wave notes
Please link the pull request to this issue and explain trust-boundary, privacy, migration, and rollback implications in the PR.
Goal
Retain proof artifacts with explicit privacy rules so Harpocrates remains privacy-preserving, interoperable, and safe at its public boundaries.
Scope
Acceptance criteria
Test expectations
Out of scope
Wave notes
Please link the pull request to this issue and explain trust-boundary, privacy, migration, and rollback implications in the PR.