All milestones (M0, M1, M2, M3, M4) fully implemented, tested, and verified across 93-standard compliance corpus.
Secure microkernel, tenant isolation chokepoint, API key auth, crypto-shredding, event bus.
Route table enforced: declared = registered = documented, per adapter, per method. Collisions panic.
SHA-256 at rest, constant-time compare, 14 scopes. Unknown/revoked/deleted-tenant all collapse to 401.
Purge fan-out shreds the vault before the tenant row. Provision detects lost idempotency race.
15 event types. Two independent replay keys. The only path for domain state.
Persisted and PII-free immutable ledger with promoted subject columns.
Live, uniform, typed closed enum RFC 9457 Problem Details.
schemars-derived from typed structs. Bare-boolean schemas impossible.
Host-agnostic by build gate — zero tokio, axum, hyper, sqlx, worker, or ring transitively.
Ed25519, JWKS, additive kid rotation. Universal QR referencing with offline resolution.
AES-256-GCM per-worker DEK, crypto-shred, HMAC blind index, redacting Debug.
Certificate + boarding-pass presenters. Tenant-scoped document types, byte-identical erased rendering.
Pure evaluators, 60µs on oversized snapshot. Gated byte-for-byte against 27 oracle fixtures.
RFC 8785 JCS canonicalization, eddsa-jcs-2022 DataIntegrityProof, standalone offline verifier.
Dual-host architecture serving identical domain crates and routes.
High-throughput cluster adapter with in-memory test harness.
Cloudflare Workers edge host compiling cleanly to wasm32-unknown-unknown with D1 SQLite storage.
Verified end-to-end with zero network: claims and signatures verified offline from cached JWKS/public keys.
Shipped and verified with 24h partition soak test.
Four states, pointer defined as total-order fold.
Continuous real-time safety overcount, SOLAS Chapter III compliance.
Expected vs verify lists; emergency muster station reconciliation.
Transfer state machine, manifest verification, vessel transit records.
Ledger as outbox, dead-letter queue + rewind recovery.
Station-bound credentials, skew clamp, replay validation.
Cryptographic key shredding, Art. 17 right-to-erasure.
Time window algebra, 28-day rotation cycles, fatigue evaluation (STCW Manila, ILO MLC 2006, ArbZG §3/§7, Dutch ATW), and service log reconciliation.
Isomorphic @oneboardingpass/sdk, W3C VC 2.0 / Open Badges 3.0 issuance, standalone zero-network verifier, and Field Terminal PWA.