# Runtime delegation v1 compatibility vector

`ed25519-jws-v1.json` is the immutable initial compatibility vector for the
canonical Runtime delegation v1 signing representation. It uses a public test
key and contains no production secret.

The vector locks:

- the exact semantic claim projection approved by P6a;
- canonical protected-header and claims JSON, including the authenticated v1
  domain separator and envelope version;
- RFC 7515 compact JWS signing input and serialization; and
- the RFC 8037 `EdDSA`/Ed25519 signature result.

P6b sets hard protocol ceilings for token size, lifetime, and verifier skew.
Those ceilings are not production settings. This vector does not approve the
shorter production delegation lifetime, configured clock skew, key-overlap,
SecurityLease duration, or `MaxSecurityStaleness`; P6-D owns those values. A
future incompatible claim or signing grammar requires a new version; this file
must not be rewritten.