§5 Traceability
This annex contains 29 normative items (E1–E29) and six editorial notes (N1–N6). Every item is indexed by audit finding identifier; identifiers of the form App. D #n cite Appendix D of the base specification. The complete ledger — all fifteen Appendix D items, all audit findings, and their dispositions (fixed-in-1.0.1, drafted-in-1.1, validator-rule VERxxx, ADR-000x, documented) — is docs/standards/VER-1.0-errata.md.
Open decisions referenced by this annex:
| ADR | Subject | Referenced by |
|---|---|---|
| ADR-0004 | Provenance action extensibility | E20 (the fusion-method registry uses the same mechanism), 1.1 draft |
| ADR-0006 | redactions[].salted_sha256 mandatory vs optional | E15 (OPEN — decision required) |
| ADR-0007 | Model-bundle manifest hashing | E29 (the 1.0.x interpretation ADR-0007 refers back to), 1.1 draft |
| ADR-0008 | Embedding dim/dtype mandatory in 1.1 | E24 |
5.1 Item index
“Identity impact” repeats §1 property 2 per item, so the property can be checked against the items rather than taken on trust. Selects a reading means the item chose between two defensible 1.0.0 readings that produced different Canonical Buffers; Records made under the non-selected reading are non-conformant and their pixel_hash values are withdrawn, not recomputed.
| Item | Subject | Classification | Identity impact |
|---|---|---|---|
| E1 | Identity gradient overstates what pixel_hash survives | patch-correction | none — states the existing behaviour correctly |
| E2 | image.width/height are Canonical Buffer dimensions | patch-correction | none |
| E3 | Quantize is a scale, not a clip | patch-correction | selects a reading (sources > 8 bpc) |
| E4 | Alpha compositing is in the 8-bit domain | patch-correction | none — ordering only |
| E5 | Rendition selection happens at decode | patch-correction | none — ordering only |
| E6 | One orientation source; out-of-range is upright | patch-correction | selects a reading (XMP-vs-EXIF carrier; malformed values) |
| E7 | Animated sources: first frame, defined | patch-correction | selects a reading (logical screen; transparent canvas) |
| E8 | Present-but-unusable ICC profile fails closed | patch-correction | withdraws identity entirely for those Assets |
| E9 | CPNP-1 consumes only an embedded ICC profile | patch-correction | selects a reading (gAMA/cHRM/sRGB/APP14/ColorSpace) |
| E10 | The pixel_hash preimage, byte for byte | patch-correction | none |
| E11 | What a preserved raw segment is, per container | patch-correction | none |
| E12 | “Conformant decoder”, defined | patch-correction | none |
| E13 | Conformance-table corrections | patch-correction | none |
| E14 | Reconciliation precedence, completed | patch-correction | none |
| E15 | Redaction shapes and the raw-preservation carve-out | patch-correction + open-ADR (ADR-0006) | none — the release's one relaxation (§1 property 3) |
| E16 | record_id and created_at, defined | patch-correction | none |
| E17 | The signature payload, defined | patch-correction | none |
| E18 | space_id is unique within a Record | patch-correction | none |
| E19 | Grade is derived from source.class | patch-correction | none |
| E20 | Fused recipe inputs, defined | patch-correction | none |
| E21 | Availability naming, other segments, basis scope | patch-correction + two sub-items additive-1.1 | none |
| E22 | Digest encodings and registered perceptual algorithms | patch-correction | none |
| E23 | Validators MUST assert format/contentEncoding | patch-correction | none |
| E24 | Vector carriage, dtype inheritance, byte layout | patch-correction | none |
| E25 | source_bytes_ref points at the Asset | patch-correction | none |
| E26 | Shipped example artifacts are illustrative | editorial (its five example corrections: patch-correction) | none |
| E27 | pixel_hash is a grouping key, never a primary key | patch-correction (conformance-claim prohibition); guidance otherwise | none |
| E28 | C2PA state consistency; “MUST be validated” | patch-correction + unverifiable additive-1.1 | none |
| E29 | model.weights_sha256 has no defined preimage in 1.0.x | patch-correction + model.bundle additive-1.1 | none |
Editorial notes N1–N6 are non-normative and appear in §4.
Artifacts of this release:
| File | Role |
|---|---|
standards/ver/1.0.1/VER-1.0.1-errata-annex.md | This annex — normative |
standards/ver/1.0.1/ver-record.schema.json | Corrected schema, $id …ver-record-1.0.1.json |
standards/ver/1.0.1/example-record.json | Corrected example, valid under 1.0.0 and 1.0.1 |
standards/ver/1.0.0/ | The frozen 1.0.0 artifact set — never modified |