US 12,645,555 B1Granted

Systems and methods for deterministic conformance suites, validator implementation certification, and verifiable certificate registries for replay-verifiable conformance receipts

AssigneeStone & Ink Archive LLC

InventorYong Bok Lee

Life of this patent

Estimating the term…

Loading patent…

Abstract

Disclosed is a fail-closed conformance control layer for machine-assisted decision artifacts. The system generates replay-verifiable receipts that commit to a canonical artifact digest, evidence and snapshot identifiers, assumptions, toolchain identifiers, and a policy pack identifier and policy version digest. A deterministic validator evaluates a receipt under the versioned policy pack to output PASS, FAIL, or HOLD with reason codes from a reason-code registry, including time-stamped modeled-variability codes. Downstream side effects are gated in a control path and permitted only on PASS; otherwise they are withheld or routed to remediation or human review. The system may emit portable conformance packs and revalidate receipts over time to detect drift and manage a certification lifecycle. Conformance suites with deterministic test vectors and expected validator outputs may certify validator implementations by issuing signed conformance certificates and publishing a certificate or certificate digest to a verifiable certificate registry for independent verification and procurement acceptance testing.

Claims30

Dependent claims

A computer system comprising one or more processors and non-transitory memory storing instructions that, when executed by the one or more processors, cause the system to:

(a) obtain a conformance suite comprising deterministic test vectors and expected validator outputs for a versioned conformance profile, the versioned conformance profile being bound to at least a policy pack identifier and a policy version digest;
(b) provide at least a subset of the deterministic test vectors to an implementation under test (IUT) configured to validate replay-verifiable conformance receipts;
(c) receive, from the IUT, test-vector outputs each comprising (i) an outcome selected from PASS, FAIL, or HOLD and (ii) one or more deterministic reason-code identifiers associated with a reason-code registry;
(d) compare the test-vector outputs to the expected validator outputs to determine whether the IUT conforms to the versioned conformance profile;
and
(e) in response to determining that the IUT conforms, generate a conformance certificate, the conformance certificate comprising:
(A) a certificate core;
and
(B) a digital signature computed over a canonical encoding of at least the certificate core;
wherein the certificate core commits to at least:
(i) a conformance suite identifier and a conformance suite digest, each for the conformance suite,
(ii) the policy pack identifier and the policy version digest,
(iii) a validator identifier for the IUT and a validator digest of the IUT, and
(iv) a certificate validity condition comprising at least one of a validity time window, a revocation reference, a revalidation cadence, or a regression-trigger rule.

11 more elements

A computer-implemented method comprising:

(a) obtaining a conformance suite comprising deterministic test vectors and expected validator outputs for a versioned conformance profile bound to at least a policy pack identifier and a policy version digest;
(b) executing, against an implementation under test (IUT), at least a subset of the deterministic test vectors, the IUT being configured to validate replay-verifiable conformance receipts;
(c) receiving test-vector outputs from the IUT, the test-vector outputs comprising an outcome selected from PASS, FAIL, or HOLD and one or more deterministic reason-code identifiers associated with a reason-code registry;
(d) comparing the test-vector outputs to the expected validator outputs to determine conformance of the IUT to the versioned conformance profile;
and
(e) upon determining conformance, generating a conformance certificate, the conformance certificate comprising:
(A) a certificate core;
and
(B) a digital signature computed over a canonical encoding of at least the certificate core;
wherein the certificate core commits to at least a conformance suite identifier for the conformance suite and a conformance suite digest of the conformance suite, the policy pack identifier and the policy version digest, a validator identifier for the IUT and a validator digest of the IUT, and a certificate validity condition comprising at least one of a validity time window, a revocation reference, a revalidation cadence, or a regression-trigger rule.

7 more elements

Dependencies are inferred from the claim text.