feat: define universal familiar embodiment binding

[BunsDev]

Summary

• publish the closed familiar.embodiment_binding.v1 and detached familiar.identity_bundle.v1 schemas
• define stable-root/revision lineage, dispatch-time atomicity, verifier-trusted ledger checks, historical retention states, and privacy-minimized evidence
• add Ed25519-authenticated binding, lineage-transition, and append-only post-commit revocation records
• add a manifest-enforced conformance lane with exact semantic error codes and read-only-checkout-safe execution

Authority boundaries

The profile proves which familiar root and exact identity revision a concrete execution embodies. It does not schedule work, grant capabilities, approve protected actions, select runtimes, or author automation lifecycle state.

Verification

• npm ci
• all schemas, manifests, and vector JSON parse
• npm test: 7/7 directory positives, 38/38 directory negatives, 22/22 embodiment positives, 65/65 embodiment negatives, 11/11 audit vectors
• npm run validate:examples
• conformance suite passes with tests/conformance read-only
• independent specification review: APPROVED
• independent code-quality review: APPROVED

Evidence

Head: 9ffc283c268fa0e1bf9d179e8dde12bfca86fbdb

Cross-repository consumers remain tracked by OpenCoven/coven#857 and its downstream certification/canary issues.

Closes #17

[Copilot]

🔵 Needs a closer look

It introduces new normative profiles plus cryptographic/semantic conformance expectations across many vectors, warranting final human review for spec correctness and downstream compatibility.

Pull request overview

Adds a new normative “execution embodiment” profile to the Familiar Contract, including schemas, validator support, and a conformance-vector lane to prove cross-runtime verification behavior (direct runs, automation, Psyche-delegated).

Changes:

• Publishes/mentions the new familiar.embodiment_binding.v1 / familiar.identity_bundle.v1 profiles in repo docs and spec pointers.
• Introduces familiar.embodiment_revocation.v1 as an append-only, post-commit revocation event schema.
• Adds an embodiment-bindings/ conformance lane (manifest + vectors + sidecars) describing semantic checks beyond JSON Schema (digest recomputation, lineage, ledger freshness, revocation ordering, privacy/retention states).

File summaries

File	Description
validators/README.md	Documents the new validator CLI mode and signature/digest semantics for embodiment bindings.
tests/conformance/README.md	Describes the new embodiment-bindings/ JSON-vector conformance lane and its manifest enforcement rules.
tests/conformance/embodiment-bindings/README.md	Defines expected lifecycle states, ledger freshness constraints, and post-commit revocation representation for vectors.
tests/conformance/embodiment-bindings/manifest.json	Enumerates mandatory embodiment-binding vectors with expected pass/fail outcome and exact semantic error codes.
tests/conformance/embodiment-bindings/negative/11-malformed-structure.json	Adds a negative vector asserting failure on non-object binding JSON.
tests/conformance/embodiment-bindings/bundles/*	Adds detached historical identity bundle sidecars used to recompute digests and exercise retention/redaction/tombstone cases.
tests/conformance/embodiment-bindings/ledgers/*	Adds trusted-ledger sidecars used to exercise freshness, ordering, and numeric-safety constraints.
tests/conformance/embodiment-bindings/revocations/*	Adds post-commit revocation event sidecars (and malformed/falsy variants) to exercise append-only revocation validation.
SPEC.md	Adds an explicit pointer that familiar.embodiment_binding.v1 is a current normative addendum per RFC-0001 §10.2.
schemas/familiar-embodiment-revocation.schema.json	Defines the familiar.embodiment_revocation.v1 JSON Schema (Ed25519-authenticated, integrity-digested event).
README.md	Documents how to validate an embodiment binding + evidence using the reference validator.
CHANGELOG.md	Records the addition of embodiment binding/bundle/revocation profiles and the new conformance lane.

Review details

• Files reviewed: 241/241 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.