Part of #227
Question
What does a note's signature commit to, and at what moment does it seal?
listEnvelopes holds an append-only signed CEL event log — that is what makes a list's did:cel verifiable. Prose is continuously mutable in a way an item row is not: if every edit is an event the envelope grows without bound, and if edits are not events the signature stops meaning "this text, at this time."
The decision needs to name: what bytes the proof covers, what triggers a seal (explicit publish? idle timeout? every save?), and what a reader is entitled to conclude from a verified note — "this exact text existed at time T" vs "this note has a history and here it is."
Blocked by the prose-location decision, and informed by the CEL research ticket.
Part of #227
Question
What does a note's signature commit to, and at what moment does it seal?
listEnvelopesholds an append-only signed CEL event log — that is what makes a list'sdid:celverifiable. Prose is continuously mutable in a way an item row is not: if every edit is an event the envelope grows without bound, and if edits are not events the signature stops meaning "this text, at this time."The decision needs to name: what bytes the proof covers, what triggers a seal (explicit publish? idle timeout? every save?), and what a reader is entitled to conclude from a verified note — "this exact text existed at time T" vs "this note has a history and here it is."
Blocked by the prose-location decision, and informed by the CEL research ticket.