# HXP-009 — Conformance, Test Vectors and Certification

Status: Candidate Standard 0.1

Digital conformance includes canonical JSON and CBOR golden vectors; every signing domain; evidence-root mutation; token capacity; signature, key, root and profile substitution; replay; duplicate commissioning; interrupted saga recovery; malicious ZIPs; and v1 compatibility.

Physical dossiers link a profile version to preregistration, unit and lot sampling, reader calibration, raw observations, analysis code, FAR/FRR/indeterminate confidence bounds, transfer attacks, environment, failures, and independent review.

Claim gates are: G0 digital safety; G1 carrier and destructive continuity; G2 optical PUF and controlled reader; G3 material, environmental and field pilot; G4 independent conformance and inter-laboratory reproducibility. Claim-matrix state cannot advance automatically because code, simulations, or a vendor quote exists.

Certified implementations publish profile identifiers, verifier compatibility, evidence-dossier digests, permitted claims, limitations, and expiry or requalification rules.