Specification 0.13, approved: the spec version 0.13 and testdata at spec-v0.13

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago · a670d9768f
parent 900700b8c9
commit a670d9768f
56 changed files with 116 additions and 112 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -4,6 +4,10 @@ Cambios notables de la librería TypeScript y de la página. El proyecto usa ver
 ## Especificación 0.10, en la rama `v0.10` — sin versión
 ### La especificación 0.13, aprobada (06-10-2026)
 - El autor aprobó el 6 de octubre de 2026 el borrador v0.13, NAT64, tal como estaba: `datekeys-go` lo cierra con el tag `spec-v0.13` (`913dd60`). `SPEC_VERSION` pasa a `0.13`, `testdata` se sincroniza con ese tag, y `testing/mutation-texts.json` se regenera con Go: solo cambia el campo `spec` de cada fichero.
 ### Dos direcciones que el §44.1 ya rechazaba (06-10-2026)
 - Un CID con un carácter de más cuyos bits son cero, que decodifica a los mismos bytes, y `https://[[2000::]/` se rechazan, como en `datekeys-go` desde `e801e03`: `isCidV1` rechaza 5 bits sobrantes o más, y el host de un literal IPv6 lleva un solo par de corchetes. Eran dos de las decisiones pendientes del autor, pero el texto aprobado de la v0.12 ya lo pedía.
--- a/README.md
+++ b/README.md
@ -21,7 +21,7 @@ Hay tres números de versión, cada uno con su significado, como en la referenci
 | Versión | Dónde | Cambia cuando |
 |---|---|---|
 | Formato | Dentro de los objetos: el formato de la cápsula, el `VERSION` del prelude de DKC1, 1, 2 o 3 al leer, que fija también la versión de schema de CONTROL_CBOR; y 1 en la trama DKK1 y en el schema de los demás objetos | Cambia el formato. Un lector rechaza una versión que no conoce (§22, §70) |
-| Especificación | `SPEC_VERSION` de `src/lib/dkc/version.ts`, hoy `0.12`: la del tag `spec-v0.12` de `datekeys-go`, que aprobó el autor el 6 de octubre de 2026. `testdata` está en ese tag (`fe405e2`), y todos sus ficheros dicen `0.12` | Cambia el texto normativo |
+| Especificación | `SPEC_VERSION` de `src/lib/dkc/version.ts`, hoy `0.13`: la del tag `spec-v0.13` de `datekeys-go`, que aprobó el autor el 6 de octubre de 2026. `testdata` está en ese tag (`913dd60`), y todos sus ficheros dicen `0.13` | Cambia el texto normativo |
 | Librería | `VERSION` de `src/lib/dkc/version.ts`, igual al campo `version` de `package.json` | Cambia la API o el comportamiento. Versionado semántico, sin promesa de estabilidad antes de 1.0.0 |
 `version.test.ts` comprueba que `VERSION` coincide con `package.json` y con su lockfile, y que `SPEC_VERSION` es la versión que nombran los vectores y fixtures compartidos; `vectors.test.ts` exige esa versión a cada fichero. El pie de la página muestra las dos.
@ -117,7 +117,7 @@ El localizador sigue al paquete `locator` de Go también donde el autor tiene de
 Un CID con un carácter de más cuyos bits son cero, y `https://[[2000::]/`, se rechazan desde que Go los rechaza (`e801e03` de `datekeys-go`): el §44.1 de la v0.12 ya pedía el CID en su forma canónica y un literal IPv6 con un solo par de corchetes.
-`checkResolvedIp` sigue el borrador v0.13 (§44.1, cambio 1 del §76), como `locator.CheckResolvedIP` de Go: una dirección de NAT64 a la que resuelve un nombre, de `64:ff9b::/96` o del prefijo de la red que la aplicación le pasa en `nat64`, cuenta por la IPv4 que lleva dentro. `vectors.test.ts` corre los 42 casos de `resolved_ip.json`.
+`checkResolvedIp` sigue la v0.13 (§44.1, cambio 1 del §76), como `locator.CheckResolvedIP` de Go: una dirección de NAT64 a la que resuelve un nombre, de `64:ff9b::/96` o del prefijo de la red que la aplicación le pasa en `nat64`, cuenta por la IPv4 que lleva dentro. `vectors.test.ts` corre los 42 casos de `resolved_ip.json`.
 Diferencias de forma con Go, sin efecto en lo que se lee o se escribe:
@ -458,7 +458,7 @@ Comprueba que los ficheros coinciden con `SOURCE.json`, sin faltantes ni sobrant
 `.gitattributes` marca `testdata/**` como binario para que git no altere ningún byte.
-Copia actual: la de `testdata/SOURCE.json` (el tag `spec-v0.12` de `datekeys-go`, `fe405e2`), que se sincroniza con `node scripts/sync-testdata.mjs sync --commit spec-v0.12`.
+Copia actual: la de `testdata/SOURCE.json` (el tag `spec-v0.13` de `datekeys-go`, `913dd60`), que se sincroniza con `node scripts/sync-testdata.mjs sync --commit spec-v0.13`.
 ## Licencia
--- a/src/lib/dkc/testing/mutation-texts.json
+++ b/src/lib/dkc/testing/mutation-texts.json
@ -1,7 +1,7 @@
 {
 "description": "The text of the error of capsule.Open for every case of testdata/vectors/mutations.json, or ok for a capsule that opens; see the header of scripts/mutation-go-texts.go.",
 "generator": "scripts/mutation-go-texts.go",
- "spec": "0.12",
+ "spec": "0.13",
 "cases": [
  {
   "name": "PUBLIC_HEADER_A + SEALED_CONTROL_B",
--- a/src/lib/dkc/version.ts
+++ b/src/lib/dkc/version.ts
@ -12,7 +12,7 @@ export const VERSION = '0.2.0-dev';
 /**
 * The version of the DateKeys Protocol Specification that this library
- * implements: the tag spec-v0.12 of the Go reference, whose shared vectors
+ * implements: the tag spec-v0.13 of the Go reference, whose shared vectors
 * and fixtures (testdata/) all name it.
 */
-export const SPEC_VERSION = '0.12';
+export const SPEC_VERSION = '0.13';
--- a/testdata/README.md
+++ b/testdata/README.md
@ -1,7 +1,7 @@
 # DateKeys test data
 Official vectors, fixtures and corpora of the DateKeys Protocol Specification
-v0.12, generated by the reference implementation.
+v0.13, generated by the reference implementation.
 Another implementation consumes them as they are: this file documents every
 format, so that no Go code has to be read. The rules that decide each verdict
 are in the specification; this file points to them, and states only what
@ -21,7 +21,7 @@ added since. The local gate (`scripts/check.sh`) and CI run it and fail if any
 committed file changes: every file below is exactly what the implementation
 computes today.
-The `spec` field of every file is `"0.12"`, the version this module declares.
+The `spec` field of every file is `"0.13"`, the version this module declares.
 What v0.12 changes from v0.11, the texts of the verdicts of a certificate and
 of a seal, the profile of a certificate and the rules of the addresses and of
 the padding of a locator, is in the files: the verdicts and the lines of
@ -56,7 +56,7 @@ Conventions for every file:
 | `vectors/security_cms.json` | security areas with a signature of `alg` 2 or a seal of `seal_type` 2, each with its context, verdicts, results and lines | §29.7, §29.10, §29.11 |
 | `vectors/ed25519_strict.json` | Ed25519 signatures and the result of the strict profile of the author signature | §29.9 |
 | `vectors/note.json` | the data of the public note and the result of its rules | §24.1, §29.6 |
-| `vectors/resolved_ip.json` | the IP address a name of a locator resolves to, NAT64 included, and whether a reader may connect | §44.1 (draft v0.13) |
+| `vectors/resolved_ip.json` | the IP address a name of a locator resolves to, NAT64 included, and whether a reader may connect | §44.1 (v0.13) |
 | `vectors/wordkey.json` | the key of words: the words of a text, what a writer refuses, and the identity the words derive | §38.1, §64 |
 | `vectors/locator.json` | the extension `datekeys.capsule` of a `.dkk`, its envelope and its locator, and what a reader rejects and uses of them | §44.1, §64 |
 | `vectors/mutations.json` | the mutation corpus: the 178 mutations of §64 and further cases | §63, §64 |
@ -589,7 +589,7 @@ refused.
 ## `vectors/resolved_ip.json`
 The IP address that the name of an https address of a locator resolves to,
-which a reader checks on every connection (spec §44.1 of the draft v0.13):
+which a reader checks on every connection (spec §44.1 of v0.13):
 `ip`, `nat64`, the NAT64 prefix of the network that the reader knows, or ""
 for none, and `result`, `ok`, or `error` with the text of the reference in
 `error`.
--- a/testdata/SOURCE.json
+++ b/testdata/SOURCE.json
@ -1,141 +1,141 @@
 {
  "module": "g.activething.com/go/DateKeys",
-  "commit": "a83b44d1c88ca253f7fc5340c58ef38a170a6f2c",
+  "commit": "913dd609dd19b31a1fb053e477d28ee142682700",
  "files": {
-    "README.md": "9832dcbef136c29ae5147e99e041e5419b7b3e3f3a24c12fe0284fe3f62a4367",
+    "README.md": "dfc10417c920adafb2064a176adad4b5b833b1282a52e9b0bb29bc077d0775c8",
    "fixtures/empty_payload.dkc": "871e9bf05b52bbae17f3adfbbf97b46e7f0e53aa8f57bcaa506e43f36f53a9d4",
    "fixtures/empty_payload.inspect.json": "373e5d012b023ad58bbb54cbdffe0bed9e50c637438a4083ddb74d5414c59f59",
-    "fixtures/empty_payload.json": "a8586332e32de5e052e48a420a8a61ec81b1274c1867527f43c37b5d6d9ba4ea",
+    "fixtures/empty_payload.json": "c78aa35bd1dd8988a449e5c148bc4ee84ffd5cd4139e19ddcc2e7af9f80ccf80",
    "fixtures/empty_payload.plaintext": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "fixtures/format2_empty_payload.dkc": "7aea2b5aa48b1a46053716f733d50fab9cd0b80b1be67631bcc06c5bb765dc21",
    "fixtures/format2_empty_payload.inspect.json": "d0bb7356d3970986e6b197640f0b3b38abe9fabf1740b745171b358aa28903ff",
-    "fixtures/format2_empty_payload.json": "36884e42ff8c924578ea7ddf2e2d3d7c321159931e14cb464fea14eeedfd62a5",
+    "fixtures/format2_empty_payload.json": "581a952451a386a9c9effc124ce6e45cd813e2215027cef19422271921922ef6",
    "fixtures/format2_empty_payload.plaintext": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "fixtures/format2_time_and_key_portable.dkc": "600892659fe4890223e895876275f656995d170fda42b07fb2bec0ca51ce4b43",
    "fixtures/format2_time_and_key_portable.dkk": "095b7bc516a22bf0c2366f0af3cd48bfe857a2354d6e2a9b285278b95e450fe0",
-    "fixtures/format2_time_and_key_portable.dkk.json": "4860910d695e0857b2747a5f7f416cb3ad1d6ab145b9f651577e47a1166ff93b",
+    "fixtures/format2_time_and_key_portable.dkk.json": "cde7c72fcd1250fed95af09354023c9d7feafa7e2418f7d10ae4e023261e1b5e",
    "fixtures/format2_time_and_key_portable.inspect.json": "522c9a98e5911c86f5f24f278971cf7c7588f6c88aaede3dd1129ee4e042868a",
-    "fixtures/format2_time_and_key_portable.json": "b97b209df5600833f8c46000835d1ae2ea76a34224948efdc511d46548ed8772",
+    "fixtures/format2_time_and_key_portable.json": "2da54bb3c4cc024b0c387c8ba344e5eff0483cbfc1b1bb9ef302df3ec8509d33",
    "fixtures/format2_time_and_key_portable.plaintext": "937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b",
    "fixtures/format2_time_and_key_recipients.dkc": "1a44fd8708c92e2e0a10cfcb1d864a71331ea9af25d97e1a42e969dc898959e3",
    "fixtures/format2_time_and_key_recipients.dkk": "2ad99b1556086ec311d7f0b3bd3aaba05e75f45c4fa22490b0d5e8bb0b1a222e",
-    "fixtures/format2_time_and_key_recipients.dkk.json": "1f264a936cc5f0b61d9fddc76667fc2f8fe054e4cee4ff9f65365a445ec851b1",
+    "fixtures/format2_time_and_key_recipients.dkk.json": "ca0263ade14c328e3751dd81be8c35d7584ce7e574e1f2047f696fd8d89d611a",
    "fixtures/format2_time_and_key_recipients.inspect.json": "d975a9eddd45f5d59618ea2455d574d807e57daf08585e840d07986f261bf099",
-    "fixtures/format2_time_and_key_recipients.json": "d63b520c5a43c6e88c45511b182f01d18c07d4e73f7d9dc49c02166153cd0cd1",
+    "fixtures/format2_time_and_key_recipients.json": "76e8904faf3bbe624d5f8de1c0d07126a36e478d72a225a228400a5c0cc35cf3",
    "fixtures/format2_time_and_key_recipients.plaintext": "0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f",
    "fixtures/format2_time_and_key_sixteen.dkc": "7aaac5c18f216bf53df326ecc817179640a53408cf25dfd50488910a762dc381",
    "fixtures/format2_time_and_key_sixteen.inspect.json": "492cd0b0dca0030df9332b098d22b4f6aa4adfb57d5540de5325e3e6d5aa3667",
-    "fixtures/format2_time_and_key_sixteen.json": "9ddaedd5328e59f9158288cdfa831c138630809b2ac6fef76b2b595faa9c1109",
+    "fixtures/format2_time_and_key_sixteen.json": "72fa30ba0d9d274579e5d47c579d5da7ac7201a3f6c842eb91934bf6ecf6871e",
    "fixtures/format2_time_and_key_sixteen.plaintext": "e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9",
    "fixtures/format2_time_only.dkc": "f5a40ac6b8a08a0c12db6114c2bca23522d6a77b512b509a217fb15f367813c4",
    "fixtures/format2_time_only.inspect.json": "40a8683f5204c7b6369558e4775ae6bb6fed978097e9e660de64c06c167b043e",
-    "fixtures/format2_time_only.json": "07152c73127987c065c5cbde81595b664c206e950b5b0cebee70d0ad7afeefdc",
+    "fixtures/format2_time_only.json": "e566e020b9bd99cbed5f2e222adee9d0def16a77d536924f4027bbcbeea1b622",
    "fixtures/format2_time_only.plaintext": "53b8ee821fb7b678e89d4f93da1812339f6cc1ab83aac6ed1432db99df784be5",
    "fixtures/format2_time_only_bloque256.dkc": "aae769c30d04920801d8b293d30864fbe223c9c9353ec2b4907a1ee1996e39f9",
    "fixtures/format2_time_only_bloque256.inspect.json": "767766414ad547f0ba95b40059e14b62c81b5489a2afcbc683bf227334d61be7",
-    "fixtures/format2_time_only_bloque256.json": "61b3ed1ceb521bba20a37faf2a783cf381eb03419b97ba93b3d6d4591576c5a7",
+    "fixtures/format2_time_only_bloque256.json": "dde4588311879acc231c80ba1132a8839504d8b4119cbfa152391655645a4487",
    "fixtures/format2_time_only_bloque256.plaintext": "53b8ee821fb7b678e89d4f93da1812339f6cc1ab83aac6ed1432db99df784be5",
    "fixtures/format2_time_only_extensions.dkc": "fb406100d5703a2e888983b3175ed34a09a34469cc722256e5cf535dd728fbe9",
    "fixtures/format2_time_only_extensions.inspect.json": "1595d793c1d35bfdaa36576b75f53d734a9e07c2a8a12036295dbaee7f5a7f5a",
-    "fixtures/format2_time_only_extensions.json": "e59689ae6c53a49dcf46b7cafb64218c6adc8e0eb26c4e59f9dd8720d0fb6c2d",
+    "fixtures/format2_time_only_extensions.json": "3a82f184a3c2a3bb3f668c24ac021ae56b9c1f8568c0e1b4e18cec0082ad2a66",
    "fixtures/format2_time_only_extensions.plaintext": "1129768e195e2f1e50b7a6f926b6eebef120212c29b5642c8a662c503b2a9131",
    "fixtures/format3_area_1024.dkc": "41ea2eed0293e4fef7f4a307b7f16aaf1339f5bf6f4ded7a6a9ae1aebeb0133c",
    "fixtures/format3_area_1024.inspect.json": "06e6b347926242ae5540f16a053f6a3545743986989bc0be8c39918bce968686",
-    "fixtures/format3_area_1024.json": "b88a27ceff8192fef1451c487f124fc1aed27e4036e00d6a748a4eb99bb7a472",
+    "fixtures/format3_area_1024.json": "03275837381b97c645012cd710de7447e6c2c53f639c61cfd38a356c06f9f48e",
    "fixtures/format3_area_1024.plaintext": "043830350a287cba1fd50f6c063f70a74209895ff0cf03147bb4e5ccdfc206b5",
    "fixtures/format3_bloque256.dkc": "ff18444f434164ba8e7b26d38c76c7855dc6b0593b2fc8b4e9a95dbf9252d55d",
    "fixtures/format3_bloque256.inspect.json": "d0007080da5ce079c6ffa3a56bf8ce519d2846a31cc1082fd027f401e4f7bade",
-    "fixtures/format3_bloque256.json": "9df352fe1a893c04aca7f53d5038237a705115e1b9a4b5a9e2f05803193f8ab2",
+    "fixtures/format3_bloque256.json": "9d3fc4715acde8bb1c7783bf42fb86914f442d37121e0c61d0c0937a80ad9c17",
    "fixtures/format3_bloque256.plaintext": "9ff2843e40bc1280dbfea8dce9386a42d06e8b43742c2cc6257540770cb53c73",
    "fixtures/format3_comment_only.dkc": "7f98a89413f08655bbbab28b96585dfa6173c1705dd81a900deba2100d19f2ef",
    "fixtures/format3_comment_only.inspect.json": "fb56eca8bf42c8c47fde4a1d6b2580fcff386f2f58b566820731dce388542196",
-    "fixtures/format3_comment_only.json": "fb1ec6d149555ca98921192db087ca5c96623df6f9daa122e779d7afe9f676f8",
+    "fixtures/format3_comment_only.json": "f016de795b7eedacdbe23233c45e70e68945eab831b6d558961d1250763be177",
    "fixtures/format3_comment_only.plaintext": "bc5b05885e608f036d8a14fde8738a8c53b395b71c3bcee99c1eab37ea23e80e",
    "fixtures/format3_note.dkc": "da1bee54231252a0fd98439e24588125c5521f6e5a2c6641b499e6b22192c0eb",
    "fixtures/format3_note.inspect.json": "dcebb62407097c757bb62552be5d315155ba8a35dec175e95c3f6fddd6e81869",
-    "fixtures/format3_note.json": "7808b4ec42ff87d0f2d1326fd67f92db78a50df408a209177ceac36dea7d3d16",
+    "fixtures/format3_note.json": "8a4899a30e13190707c4505427e5a2bcdca50cd8e3b1642428a47052516f30fc",
    "fixtures/format3_note.plaintext": "0468737c5141be936f59d2823122e87661d4ae155a1df036b4cad1ea6620c17b",
    "fixtures/format3_seal_unsupported.dkc": "ae3219fbdbd1de4cef6fade1a3fb3f6e5d5e2e8af54d9516b05f0a48136913ad",
    "fixtures/format3_seal_unsupported.inspect.json": "b3a7a1038192394c1f844fed994011646f3e78d1cf311c18cb5c936249b95f14",
-    "fixtures/format3_seal_unsupported.json": "276adbb77e8e60b432a16a8d1c1e8d802b030bfd2e86d9e9cdbf4fdaebd92cf0",
+    "fixtures/format3_seal_unsupported.json": "c168a8aee59560d747b5a48ec34cd843ec6fd3eb588a2a41c5ffc5c84436f0ea",
    "fixtures/format3_seal_unsupported.plaintext": "0f865221d26545762712271faf835cb2e9980f8fb15c9d3b94fb6747cf16c1df",
    "fixtures/format3_sealed.dkc": "dde5a072d8783227d28279d06d3d226a1fb967c766da626f889d1c6fd76ac9c7",
    "fixtures/format3_sealed.inspect.json": "b984a0755332bad838025e47f8e917b9f18b9bb5c068c2d1ef0070db8e42849c",
-    "fixtures/format3_sealed.json": "285d01641e1446d0ccbf05c21f7291936784c188cbf8cb4c842839cda5612512",
+    "fixtures/format3_sealed.json": "453a142ef3e2b854e22a5c5f714b4199b614a73078e64d8bd19d4496d530476d",
    "fixtures/format3_sealed.plaintext": "aea0f5feb40acd81ca3b02dd21ea15510234da3ab52b374322f3206e7632d47b",
    "fixtures/format3_security_v2.dkc": "3d02b39ace010d74604554e378d22fe5ce00cecd998c0f797d657b17620b8912",
    "fixtures/format3_security_v2.inspect.json": "dba4d21f1d4e228a17c761bae9a4b8c5a91cd9c0123e3141d3782a43c139321e",
-    "fixtures/format3_security_v2.json": "b87d0b11ab22bfd452c095992f391512ac9d8744a154fe984b39f8eaa146c3b6",
+    "fixtures/format3_security_v2.json": "e09e265f7200713ccad07d1e45a7f4cbbd2aa8f47c7c13fc2b6ff1183cdce505",
    "fixtures/format3_security_v2.plaintext": "0c58ef40e4b1c7afde0f6e0a1f4ed7e3d45405757c5143a095f0c2b58042669f",
    "fixtures/format3_signature_unsupported.dkc": "e8e3106d8d73bb7b845062e0fe42af21df7d7cd8f63c335cab8dedb3e690df31",
    "fixtures/format3_signature_unsupported.inspect.json": "6db653db27604cb07e2cb2c23545fb68542c121e85002762f26c6d39e63bf00c",
-    "fixtures/format3_signature_unsupported.json": "5da3c941c1115668a406ba24d74cbd924468539dd12566282a2d35e65c90adff",
+    "fixtures/format3_signature_unsupported.json": "33595f42dfa8f7136c627a7d8bef8378f251775437652db4dcd159e51bbe4ee4",
    "fixtures/format3_signature_unsupported.plaintext": "9fe05e6b3a463371b33fc6a81b81d538e572789a8d03ace9f752a931f4ca4728",
    "fixtures/format3_signed.dkc": "3c7d3c9e24c02853a0c7761b93bea1120b27fce396468d8d0f68e53aeb668c5e",
    "fixtures/format3_signed.inspect.json": "7c37054d542869e766147350e2fa72695f209d39a03726757008e2c2291b0e97",
-    "fixtures/format3_signed.json": "14104ab66ff737a2297dfd8dd57a8226b40dc868548ba1150fd207957d9e208f",
+    "fixtures/format3_signed.json": "190db6be855915351271e1f6d6f3fcc352aee9f25e0485efe3d545b28880d458",
    "fixtures/format3_signed.plaintext": "3de3ccab0ac74f95a76aa45c0f85e1749d4b4a051d87e81828eff6bf24372000",
    "fixtures/format3_signed_cms.dkc": "d658f8d5ac2c5550c07b8f8fd6883b2f6dc02ceafc47d436ea02d8950b2548d2",
    "fixtures/format3_signed_cms.inspect.json": "afadf530e8146687b25c03f26100ebff18e7f481e0ef09378816bad582270de5",
-    "fixtures/format3_signed_cms.json": "89d42ccde98d9fc446ad7b25966aa824a8dd1e5d8b7ffd4ef9d164f0dcf250b0",
+    "fixtures/format3_signed_cms.json": "2440f4b454cb465bfa33e9c37d151ca360b185218f092b6d1f95ec77c8428e95",
    "fixtures/format3_signed_cms.plaintext": "31c35eeeee856277b605fe44203a8f4786bb8f591eda3b6ee58252df5b3cf2f0",
    "fixtures/format3_single.dkc": "9f68664af8733255084be9036a100b75d27bd16106bf0acff94ce469dd1d1743",
    "fixtures/format3_single.inspect.json": "7878da921c17aada50e00d5911ea97e8558633a1684fb96acbd00d6f1b117529",
-    "fixtures/format3_single.json": "37c075d59f59ce464ebb3269631b8d51db72cf20db3dd25b5844615013506914",
+    "fixtures/format3_single.json": "08f9cdf0a8327fb65a45c78aeca5d3817d4da367145d9042a20efdefb761d637",
    "fixtures/format3_single.plaintext": "74f9dd84d07e95a31e6dc063bf65ce414197acf84aac445eabc76fa4e3f24936",
    "fixtures/format3_time_and_key_portable.dkc": "680d29962e575689a31543df28433dae7737abd9a793e9cae92ef40920d09636",
    "fixtures/format3_time_and_key_portable.dkk": "54cc64d849395234b3e093e47f432b72781ccc13f455c9ef394e3554ab566751",
-    "fixtures/format3_time_and_key_portable.dkk.json": "d00495adec91624c2954e5fd959bc02f44301b5b28d6da60870385754ac0c1d7",
+    "fixtures/format3_time_and_key_portable.dkk.json": "20d88fce67d30d7f362085f9dd576d46a249d87ad8d56cf66456d22295c66ce8",
    "fixtures/format3_time_and_key_portable.inspect.json": "f269af86f5bf84c22a1038fd78db146af93166150755eb1ca35cf15e224035b4",
-    "fixtures/format3_time_and_key_portable.json": "8d779908e6902b11486bcfbd6403ff232f327f6c0fbcaca320a9db386c092243",
+    "fixtures/format3_time_and_key_portable.json": "dc2b1b283700bb5806692d25d27bde4f6c7954935182791df527d96bdb216ffb",
    "fixtures/format3_time_and_key_portable.plaintext": "e6684cf607c102bfa4d6977742d5a7520b0e09483282181bd6d8f5f4ba5f7726",
    "fixtures/format3_tree.dkc": "217f378faaf795f6a9c416b564fb8931bb2e896918aee870120fd14f9a5da7d1",
    "fixtures/format3_tree.inspect.json": "643a9dfdc2d0c44b8a1636909c66ed81bfd8c50df2a4cad6566832a8e47ba938",
-    "fixtures/format3_tree.json": "0fffb1ce26ed74f91b376a6358c0f6e82b31b6de12fcf97b452fc7ecb578cb68",
+    "fixtures/format3_tree.json": "0883c4468b75c520f9b060e54611198f03f16537eca0a1eaff6aefbba54b2199",
    "fixtures/format3_tree.plaintext": "f69ac5f450966f7d0e9161aa37451d4260b194a750e3e132c02e8a15ba561cfa",
    "fixtures/format3_unsigned.dkc": "317ab722ae3812a25ddd78b4c98c586363e5587c8d3634c881ce7c421af19168",
    "fixtures/format3_unsigned.inspect.json": "2f52f7286d6bd4c846ddd63b10b4989b25d17501a989a2e9deb25e4db0859e1a",
-    "fixtures/format3_unsigned.json": "76b6f94b47fec30a0efc8f296d05de5d2f5ca77c46c2067b9d4edf3d3aedecf6",
+    "fixtures/format3_unsigned.json": "5d1313ec6f0f6a498dfc78e13735be3e90a004f102338082227058278d63247a",
    "fixtures/format3_unsigned.plaintext": "25527e5e2e1ce02056d4419fb89f7b0ce35e4920f93217f58dcf62a4377f8af5",
    "fixtures/time_and_key_portable.dkc": "2e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972",
    "fixtures/time_and_key_portable.dkk": "e528fa2c832c91119f0684bb9d6fb3c4c2d0d55183482890e7c4fe92f668426a",
-    "fixtures/time_and_key_portable.dkk.json": "7d3144763cb351114dbb6eb5b9e646562b0da0221df791420961be81f3825377",
+    "fixtures/time_and_key_portable.dkk.json": "2102ce0cde9784249a0045b1e7a1526b62ef73d30fd543fa15d45dcd5187d4d8",
    "fixtures/time_and_key_portable.inspect.json": "238c1f8ca6a6bf69f20bf26f5676e89a0b07e83b4362628560fc2f7522a202c9",
-    "fixtures/time_and_key_portable.json": "9eeb5bf23ae1ba61ada85c673a2140df6972ef5eb0811db9d560203b3f92f020",
+    "fixtures/time_and_key_portable.json": "23390143f6eaa92fea1af9d0acbad21a4c0c325b78e18d9720326bbf07755665",
    "fixtures/time_and_key_portable.plaintext": "937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b",
    "fixtures/time_and_key_portable_extension.dkk": "0bf463a7c65627b7dda2234d728df89ec5b835816a2a37b91497d8fecc5ea548",
-    "fixtures/time_and_key_portable_extension.dkk.json": "7bcba4191cfed96f93652118bff23a52c00cf1fc7d4d6d3a9f8205c57c439dcd",
+    "fixtures/time_and_key_portable_extension.dkk.json": "dc4036242ecdbd91f28ba4b2bd0e14be5c770bb4d42679fbf5c1ea64d8e3bf8a",
    "fixtures/time_and_key_recipients.dkc": "69ac110380f5d768b5b6afaa157a50ed17d8ceccfbd4604ffa5b6da38539b635",
    "fixtures/time_and_key_recipients.dkk": "19f6c47150c3194712d454f43c7392b7344e6b4e7b074d83e9ca5f563a8e072f",
-    "fixtures/time_and_key_recipients.dkk.json": "2a87dc805a192034d09b02494207ed8e42cca3e45212367d96e4890b342c9a8c",
+    "fixtures/time_and_key_recipients.dkk.json": "9b4265de639e223d99f47d05806d8d4d89d223910a69a10e6958f0e969edc0bb",
    "fixtures/time_and_key_recipients.inspect.json": "4b32c63d18febe0772837fbcd75a0c971e31378bf799201b720a9d32bdcd8c2b",
-    "fixtures/time_and_key_recipients.json": "ad6da5141b310ddd7988647e1f999a3f962127a48f272f05f811a5f04ab41061",
+    "fixtures/time_and_key_recipients.json": "7e64517b3016b3e3c17fde6923fa88a2046d6ef6afe597ff311668c4e41d7675",
    "fixtures/time_and_key_recipients.plaintext": "0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f",
    "fixtures/time_only.dkc": "99e915810d595f1092700b728f5e5081d78efe83f5343e76325b1bcc2c33ccf2",
    "fixtures/time_only.inspect.json": "a4d45f945d6ba6616c01e120ac1133785e5279fea7dcab706b5feee287be8884",
-    "fixtures/time_only.json": "ccd6fa044699911e0913e8fe3e8e29b074b6d7582373cb80b59521e2274a9a79",
+    "fixtures/time_only.json": "b26e92ce9fd1e91f0141ca609bb2bfb46aec1185ed2eabf26ffd4ca7df3edd5c",
    "fixtures/time_only.plaintext": "53b8ee821fb7b678e89d4f93da1812339f6cc1ab83aac6ed1432db99df784be5",
    "fixtures/time_only_extensions.dkc": "0446c9b73e267adcb24e5cc89afba2544a386ec9a050016e06517a4a57aa2085",
    "fixtures/time_only_extensions.inspect.json": "6f957b028da8a4a495b5e951ced0b91e0678128dac4e962b02d024b9439a0ba1",
-    "fixtures/time_only_extensions.json": "58842a2cf5330ffd8f53fafe82d38ad1617d1f653b772731a777a388d21c2f4b",
+    "fixtures/time_only_extensions.json": "ec60ac193847a083d41835c7f1d198d721adf864df6b33527c7837bd19c6efac",
    "fixtures/time_only_extensions.plaintext": "1129768e195e2f1e50b7a6f926b6eebef120212c29b5642c8a662c503b2a9131",
-    "vectors/cbor.json": "5700b20c618da227eb401f0a16cc1d6ee018394677e5580684df8164ae7c9eb0",
+    "vectors/cbor.json": "3001074166fae65e4ebad48c0e126823102e21bc9ca51e89ebc1c30ed6f52b30",
-    "vectors/dk1.json": "877d512c08fa70375aeb55f13c7741f4898f44cf0eda82fa88bca39745ca3017",
+    "vectors/dk1.json": "62b6af3aa9145cf6a35e2351de008625d1c14405cec4aeb2926d4097e4dd10b3",
-    "vectors/ed25519_strict.json": "d331860a452e2224b4b4b683b261977fa088d1f12599b2daa0d9a07dc97f8739",
+    "vectors/ed25519_strict.json": "ad436026fe5503fcccd0b2ffb213f2fd29092aa76f932c99662314302a036d8e",
-    "vectors/head_schema.json": "60f88ef07e45e2a361cd78ccb2fba69a70068ea65c2a2ac4de446dd2fd472050",
+    "vectors/head_schema.json": "fb9b8c1b9a8c481ee1253efe70d70e80c78e0431721413ec806a0ce20ce740c9",
-    "vectors/inspect_differential.json": "2fadb915a8c8a0f9e4b243b989b82ceb02edd2085be94a078139aae2bf5e142b",
+    "vectors/inspect_differential.json": "e994f1865b197eca6d04c10257af757134ec967566bb55909501a9a20e489275",
-    "vectors/locator.json": "00111437a451398f28c72226963eb3a74461a8f0997a09b27730a41dbc32dca9",
+    "vectors/locator.json": "a6320549f06f9100e26ea2b7be87e9f8ea45ec582409656f1fbeaf31ad6c28a3",
-    "vectors/mutations.json": "99dbc2259456494a3b03cf787794d16cb2be119f55c419b26b1874bf5503ad13",
+    "vectors/mutations.json": "f823323312fa3204c487d8fef1e7ecd13ef22b7f30783171a1723a306dc31257",
-    "vectors/note.json": "3f8951db5362946cee20f32facef404c1c5d1f044ab64dce0fe61f54cab57a90",
+    "vectors/note.json": "c82ab92ba73e7721e897b2fd6259bbf33fbe4927eb2be409e5d7dbd00c495c0b",
-    "vectors/padding.json": "c1a0599b9239132ea97a089cfcc72448d7f5bfc03c17beb8b3768bf45340334c",
+    "vectors/padding.json": "502de972f6015e32be1dfa84957bf0df203dfcb3c6662d4eedbdd594a9d51573",
-    "vectors/path_fold.json": "cc867c346670e0de69b64ac6acd23b9cbb13b59192b694f4b3c1ddc7641addb2",
+    "vectors/path_fold.json": "c7e329e12052c0c23f9ce4cec6cfbfd1c6025e9a4f3d357d121a56d2aba16765",
-    "vectors/paths.json": "bfdbcc9ceb8f6f1220bc998e00b6d32061e49bb8e6fcd3d903a43521b86e3388",
+    "vectors/paths.json": "485ffcef29f826da01d90ef7789b6791f1f8709958be72653e3bdffabd0c690b",
-    "vectors/profile_quicknet.json": "c5b9a57db1e9c64a226c08ab4a51ffcb2e29599a74b5b145308a13ba8f195445",
+    "vectors/profile_quicknet.json": "6e6d0087d332f5fa27ccf8961b5ae225d123b137754deba2b6815c5a17f958c8",
-    "vectors/quicknet_rounds.json": "b053c423d75a602d23777aa9fe0ec7860dbfb6ee42275a88a880731338c4ffe4",
+    "vectors/quicknet_rounds.json": "8fbcdfea66ec31ffec38934c3d595e19d274682c20fe42dfe36d98350e2dd744",
-    "vectors/resolved_ip.json": "cc1112aae424bc6f358a39211d7e5cc5a9a3b04c27c40e9e4070a74524055b72",
+    "vectors/resolved_ip.json": "7b7752d94a79d9255d951f85ded9aff799ea211e51a5f503d6d56328e28e3b1b",
-    "vectors/security.json": "41da683fb4f0275c903d7e79029fed885c7b94e03c0160ab94bad6acf325f0b5",
+    "vectors/security.json": "df141a266eb56e8d68521fce58fe8a7f45522273d01137e66f8d4bb07a80cb80",
-    "vectors/security_cms.json": "13e0deece70f640e4507adc33c9df25545fc30a4b0a543cff07dcdddc8923ea4",
+    "vectors/security_cms.json": "cc0e192995b66a643530905e6e85f35bb74976e9fbdbbd3bafc1629f365d8950",
-    "vectors/tlock_ibe.json": "fdc846000dd4da5fcb0d976994e07e4acf335819cf434a2badc973e90aa5dbfe",
+    "vectors/tlock_ibe.json": "271a15461d3c7840cc29500ec95dd27360868645d933ecfd2c449ad6c3423866",
-    "vectors/wordkey.json": "e662948f70f9de46ebfb13b114ed92efae9856139fae3ddd97127f82fb5515c4"
+    "vectors/wordkey.json": "88c1d13e08240192cbba117de96a61f725262b898ebdfddb298e52b11bfd536f"
  }
 }
--- a/testdata/fixtures/empty_payload.json
+++ b/testdata/fixtures/empty_payload.json
@ -1,6 +1,6 @@
 {
  "description": "time_only capsule with an empty payload",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 1,
  "file": "empty_payload.dkc",
  "sha256": "871e9bf05b52bbae17f3adfbbf97b46e7f0e53aa8f57bcaa506e43f36f53a9d4",
--- a/testdata/fixtures/format2_empty_payload.json
+++ b/testdata/fixtures/format2_empty_payload.json
@ -1,6 +1,6 @@
 {
  "description": "format 2 time_only capsule with an empty content: L = 0, P = 256",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 2,
  "file": "format2_empty_payload.dkc",
  "sha256": "7aea2b5aa48b1a46053716f733d50fab9cd0b80b1be67631bcc06c5bb765dc21",
--- a/testdata/fixtures/format2_time_and_key_portable.dkk.json
+++ b/testdata/fixtures/format2_time_and_key_portable.dkk.json
@ -1,6 +1,6 @@
 {
  "description": "portable X25519 .dkk of format2_time_and_key_portable.dkc",
-  "spec": "0.12",
+  "spec": "0.13",
  "file": "format2_time_and_key_portable.dkk",
  "sha256": "095b7bc516a22bf0c2366f0af3cd48bfe857a2354d6e2a9b285278b95e450fe0",
  "credential_id": "e3c7be83cbf1fbd6b115c96411b3bd01",
--- a/testdata/fixtures/format2_time_and_key_portable.json
+++ b/testdata/fixtures/format2_time_and_key_portable.json
@ -1,6 +1,6 @@
 {
  "description": "format 2 time_and_key capsule with one credential, a portable .dkk, and 15 dummies",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 2,
  "file": "format2_time_and_key_portable.dkc",
  "sha256": "600892659fe4890223e895876275f656995d170fda42b07fb2bec0ca51ce4b43",
--- a/testdata/fixtures/format2_time_and_key_recipients.dkk.json
+++ b/testdata/fixtures/format2_time_and_key_recipients.dkk.json
@ -1,6 +1,6 @@
 {
  "description": "portable X25519 .dkk of format2_time_and_key_recipients.dkc",
-  "spec": "0.12",
+  "spec": "0.13",
  "file": "format2_time_and_key_recipients.dkk",
  "sha256": "2ad99b1556086ec311d7f0b3bd3aaba05e75f45c4fa22490b0d5e8bb0b1a222e",
  "credential_id": "93cedf68421710e83908ec683b104436",
--- a/testdata/fixtures/format2_time_and_key_recipients.json
+++ b/testdata/fixtures/format2_time_and_key_recipients.json
@ -1,6 +1,6 @@
 {
  "description": "format 2 time_and_key capsule for three known X25519 recipients and a portable .dkk, and 12 dummies",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 2,
  "file": "format2_time_and_key_recipients.dkc",
  "sha256": "1a44fd8708c92e2e0a10cfcb1d864a71331ea9af25d97e1a42e969dc898959e3",
--- a/testdata/fixtures/format2_time_and_key_sixteen.json
+++ b/testdata/fixtures/format2_time_and_key_sixteen.json
@ -1,6 +1,6 @@
 {
  "description": "format 2 time_and_key capsule for sixteen known X25519 recipients, without dummies",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 2,
  "file": "format2_time_and_key_sixteen.dkc",
  "sha256": "7aaac5c18f216bf53df326ecc817179640a53408cf25dfd50488910a762dc381",
--- a/testdata/fixtures/format2_time_only.json
+++ b/testdata/fixtures/format2_time_only.json
@ -1,6 +1,6 @@
 {
  "description": "format 2 time_only capsule, padding code 2 (reforzado): L = 78000, P = 79872, two STREAM chunks",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 2,
  "file": "format2_time_only.dkc",
  "sha256": "f5a40ac6b8a08a0c12db6114c2bca23522d6a77b512b509a217fb15f367813c4",
--- a/testdata/fixtures/format2_time_only_bloque256.json
+++ b/testdata/fixtures/format2_time_only_bloque256.json
@ -1,6 +1,6 @@
 {
  "description": "format 2 time_only capsule with the content of format2_time_only and padding code 1 (bloque256): L = 78000, P = 78080",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 2,
  "file": "format2_time_only_bloque256.dkc",
  "sha256": "aae769c30d04920801d8b293d30864fbe223c9c9353ec2b4907a1ee1996e39f9",
--- a/testdata/fixtures/format2_time_only_extensions.json
+++ b/testdata/fixtures/format2_time_only_extensions.json
@ -1,6 +1,6 @@
 {
  "description": "format 2 time_only capsule with a noncritical PUBLIC_HEADER extension and a noncritical CONTROL_CBOR extension",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 2,
  "file": "format2_time_only_extensions.dkc",
  "sha256": "fb406100d5703a2e888983b3175ed34a09a34469cc722256e5cf535dd728fbe9",
--- a/testdata/fixtures/format3_area_1024.json
+++ b/testdata/fixtures/format3_area_1024.json
@ -1,6 +1,6 @@
 {
  "description": "format 3 time_only capsule with a security area of 1024 bytes, as a later version may write it, holding the empty security",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 3,
  "file": "format3_area_1024.dkc",
  "sha256": "41ea2eed0293e4fef7f4a307b7f16aaf1339f5bf6f4ded7a6a9ae1aebeb0133c",
--- a/testdata/fixtures/format3_bloque256.json
+++ b/testdata/fixtures/format3_bloque256.json
@ -1,6 +1,6 @@
 {
  "description": "format 3 time_only capsule with padding code 1 (bloque256) and one file of 20000 bytes",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 3,
  "file": "format3_bloque256.dkc",
  "sha256": "ff18444f434164ba8e7b26d38c76c7855dc6b0593b2fc8b4e9a95dbf9252d55d",
--- a/testdata/fixtures/format3_comment_only.json
+++ b/testdata/fixtures/format3_comment_only.json
@ -1,6 +1,6 @@
 {
  "description": "format 3 time_only capsule with a comment of two lines, the second one with a TAB, a declared author and no files",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 3,
  "file": "format3_comment_only.dkc",
  "sha256": "7f98a89413f08655bbbab28b96585dfa6173c1705dd81a900deba2100d19f2ef",
--- a/testdata/fixtures/format3_note.json
+++ b/testdata/fixtures/format3_note.json
@ -1,6 +1,6 @@
 {
  "description": "format 3 time_only capsule with a single file, nota.txt, and the public note «Cartas del viaje a Lisboa» in the noncritical array of PUBLIC_HEADER (spec v0.11, §24.1)",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 3,
  "file": "format3_note.dkc",
  "sha256": "da1bee54231252a0fd98439e24588125c5521f6e5a2c6641b499e6b22192c0eb",
--- a/testdata/fixtures/format3_seal_unsupported.json
+++ b/testdata/fixtures/format3_seal_unsupported.json
@ -1,6 +1,6 @@
 {
  "description": "format 3 time_only capsule with an author-signature of alg 4294967295, as in format3_signature_unsupported, and a seal of seal_type 4294967295, reserved for tests, with a random token of 32 bytes: verdicts F1 and S1",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 3,
  "file": "format3_seal_unsupported.dkc",
  "sha256": "ae3219fbdbd1de4cef6fade1a3fb3f6e5d5e2e8af54d9516b05f0a48136913ad",
--- a/testdata/fixtures/format3_sealed.json
+++ b/testdata/fixtures/format3_sealed.json
@ -1,6 +1,6 @@
 {
  "description": "format 3 time_only capsule with a single file, nota.txt, signed with alg 1 by the test key of format3_signed and sealed with seal_type 2 by a test time-stamping authority before the round time: verdicts F4 and S4, with SEAL_SUBJECT and the token in the record",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 3,
  "file": "format3_sealed.dkc",
  "sha256": "dde5a072d8783227d28279d06d3d226a1fb967c766da626f889d1c6fd76ac9c7",
--- a/testdata/fixtures/format3_security_v2.json
+++ b/testdata/fixtures/format3_security_v2.json
@ -1,6 +1,6 @@
 {
  "description": "format 3 time_only capsule whose security is of version 2: verdict X",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 3,
  "file": "format3_security_v2.dkc",
  "sha256": "3d02b39ace010d74604554e378d22fe5ce00cecd998c0f797d657b17620b8912",
--- a/testdata/fixtures/format3_signature_unsupported.json
+++ b/testdata/fixtures/format3_signature_unsupported.json
@ -1,6 +1,6 @@
 {
  "description": "format 3 time_only capsule with an author-signature of alg 4294967295, a random key of 32 bytes and a random signature of 64: verdicts F1 and S0",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 3,
  "file": "format3_signature_unsupported.dkc",
  "sha256": "e8e3106d8d73bb7b845062e0fe42af21df7d7cd8f63c335cab8dedb3e690df31",
--- a/testdata/fixtures/format3_signed.json
+++ b/testdata/fixtures/format3_signed.json
@ -1,6 +1,6 @@
 {
  "description": "format 3 time_only capsule with a single file, nota.txt, signed with alg 1 by a test key whose seed the record gives: verdict F4, and the commitments and the message of the signature",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 3,
  "file": "format3_signed.dkc",
  "sha256": "3c7d3c9e24c02853a0c7761b93bea1120b27fce396468d8d0f68e53aeb668c5e",
--- a/testdata/fixtures/format3_signed_cms.json
+++ b/testdata/fixtures/format3_signed_cms.json
@ -1,6 +1,6 @@
 {
  "description": "format 3 time_only capsule with a single file, nota.txt, signed with alg 2 by two test certificates, an ECDSA P-256 one and an RSA 2048 one, each sealed by a test time-stamping authority before the round time: verdict F6, with the certificates, the commitments, SIGNERS and the result of each signer in the record",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 3,
  "file": "format3_signed_cms.dkc",
  "sha256": "d658f8d5ac2c5550c07b8f8fd6883b2f6dc02ceafc47d436ea02d8950b2548d2",
--- a/testdata/fixtures/format3_single.json
+++ b/testdata/fixtures/format3_single.json
@ -1,6 +1,6 @@
 {
  "description": "format 3 time_only capsule with a single file, nota.txt, with its mtime",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 3,
  "file": "format3_single.dkc",
  "sha256": "9f68664af8733255084be9036a100b75d27bd16106bf0acff94ce469dd1d1743",
--- a/testdata/fixtures/format3_time_and_key_portable.dkk.json
+++ b/testdata/fixtures/format3_time_and_key_portable.dkk.json
@ -1,6 +1,6 @@
 {
  "description": "portable X25519 .dkk of format3_time_and_key_portable.dkc",
-  "spec": "0.12",
+  "spec": "0.13",
  "file": "format3_time_and_key_portable.dkk",
  "sha256": "54cc64d849395234b3e093e47f432b72781ccc13f455c9ef394e3554ab566751",
  "credential_id": "bdb483fba42daf0b409f44d23033f362",
--- a/testdata/fixtures/format3_time_and_key_portable.json
+++ b/testdata/fixtures/format3_time_and_key_portable.json
@ -1,6 +1,6 @@
 {
  "description": "format 3 time_and_key capsule with one credential, a portable .dkk, and 15 dummies",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 3,
  "file": "format3_time_and_key_portable.dkc",
  "sha256": "680d29962e575689a31543df28433dae7737abd9a793e9cae92ef40920d09636",
--- a/testdata/fixtures/format3_tree.json
+++ b/testdata/fixtures/format3_tree.json
@ -1,6 +1,6 @@
 {
  "description": "format 3 time_only capsule with five files in three folders, one of them over two STREAM chunks and one without mtime, a comment of two lines and a declared author",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 3,
  "file": "format3_tree.dkc",
  "sha256": "217f378faaf795f6a9c416b564fb8931bb2e896918aee870120fd14f9a5da7d1",
--- a/testdata/fixtures/format3_unsigned.json
+++ b/testdata/fixtures/format3_unsigned.json
@ -1,6 +1,6 @@
 {
  "description": "format 3 time_only capsule with a single file, nota.txt, as format3_signed, without a signature: the area of 32 KiB of spec v0.11 holds the empty security, and P is the one of format3_signed",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 3,
  "file": "format3_unsigned.dkc",
  "sha256": "317ab722ae3812a25ddd78b4c98c586363e5587c8d3634c881ce7c421af19168",
--- a/testdata/fixtures/time_and_key_portable.dkk.json
+++ b/testdata/fixtures/time_and_key_portable.dkk.json
@ -1,6 +1,6 @@
 {
  "description": "portable X25519 .dkk of time_and_key_portable.dkc",
-  "spec": "0.12",
+  "spec": "0.13",
  "file": "time_and_key_portable.dkk",
  "sha256": "e528fa2c832c91119f0684bb9d6fb3c4c2d0d55183482890e7c4fe92f668426a",
  "credential_id": "3955e944a3c60cfa1fd6485e9693c77d",
--- a/testdata/fixtures/time_and_key_portable.json
+++ b/testdata/fixtures/time_and_key_portable.json
@ -1,6 +1,6 @@
 {
  "description": "time_and_key capsule whose only recipient is a portable .dkk",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 1,
  "file": "time_and_key_portable.dkc",
  "sha256": "2e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972",
--- a/testdata/fixtures/time_and_key_portable_extension.dkk.json
+++ b/testdata/fixtures/time_and_key_portable_extension.dkk.json
@ -1,6 +1,6 @@
 {
  "description": "portable X25519 .dkk of time_and_key_portable.dkc with a noncritical extension: the credential of time_and_key_portable.dkk re-issued with org.example.delivery",
-  "spec": "0.12",
+  "spec": "0.13",
  "file": "time_and_key_portable_extension.dkk",
  "sha256": "0bf463a7c65627b7dda2234d728df89ec5b835816a2a37b91497d8fecc5ea548",
  "credential_id": "3955e944a3c60cfa1fd6485e9693c77d",
--- a/testdata/fixtures/time_and_key_recipients.dkk.json
+++ b/testdata/fixtures/time_and_key_recipients.dkk.json
@ -1,6 +1,6 @@
 {
  "description": "portable X25519 .dkk of time_and_key_recipients.dkc",
-  "spec": "0.12",
+  "spec": "0.13",
  "file": "time_and_key_recipients.dkk",
  "sha256": "19f6c47150c3194712d454f43c7392b7344e6b4e7b074d83e9ca5f563a8e072f",
  "credential_id": "b89292aedf6d05d584cec9a871ce8735",
--- a/testdata/fixtures/time_and_key_recipients.json
+++ b/testdata/fixtures/time_and_key_recipients.json
@ -1,6 +1,6 @@
 {
  "description": "time_and_key capsule for two known X25519 recipients and a portable .dkk",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 1,
  "file": "time_and_key_recipients.dkc",
  "sha256": "69ac110380f5d768b5b6afaa157a50ed17d8ceccfbd4604ffa5b6da38539b635",
--- a/testdata/fixtures/time_only.json
+++ b/testdata/fixtures/time_only.json
@ -1,6 +1,6 @@
 {
  "description": "time_only capsule, two STREAM chunks, no extensions",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 1,
  "file": "time_only.dkc",
  "sha256": "99e915810d595f1092700b728f5e5081d78efe83f5343e76325b1bcc2c33ccf2",
--- a/testdata/fixtures/time_only_extensions.json
+++ b/testdata/fixtures/time_only_extensions.json
@ -1,6 +1,6 @@
 {
  "description": "time_only capsule with a noncritical PUBLIC_HEADER extension and a noncritical CONTROL_CBOR extension",
-  "spec": "0.12",
+  "spec": "0.13",
  "format": 1,
  "file": "time_only_extensions.dkc",
  "sha256": "0446c9b73e267adcb24e5cc89afba2544a386ec9a050016e06517a4a57aa2085",
--- a/testdata/vectors/cbor.json
+++ b/testdata/vectors/cbor.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "CBOR profile of spec §58 and the schemas of spec/datekeys.cddl, generated by the reference implementation. accept and reject are walked as one data item of the profile with the limits of walk; schemas are decoded with the decoder of their schema. See testdata/README.md.",
  "walk": {
    "max_depth": 3,
--- a/testdata/vectors/dk1.json
+++ b/testdata/vectors/dk1.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "Canonical dk1_ strings and rejected encodings (spec §18, §19, §66), generated by the reference implementation.",
  "vectors": [
    {
--- a/testdata/vectors/ed25519_strict.json
+++ b/testdata/vectors/ed25519_strict.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "Ed25519 signatures and the result of the strict profile of the author signature (spec v0.11, §29.9), after the cases of «Taming the many EdDSAs»; stdlib is the result of crypto/ed25519 of Go, for the record. Generated by the reference implementation. See testdata/README.md.",
  "vectors": [
    {
--- a/testdata/vectors/head_schema.json
+++ b/testdata/vectors/head_schema.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "HEAD_CBOR of format 3 (spec §29.4 to §29.6) and the result of decoding it with no extension known, generated by the reference implementation: layer 2 (type tag and version), layer 3 (the CDDL with R1 and R8), then layer 4 in key order (spec §69.1). See testdata/README.md.",
  "heads": [
    {
--- a/testdata/vectors/inspect_differential.json
+++ b/testdata/vectors/inspect_differential.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "Differential corpus of the pre-unlock checks (spec §63 steps 1 to 8): deterministic mutations of the official .dkc fixtures with the verdict of the reference implementation. See testdata/README.md.",
  "format": "Each mutation is bases[base].file (in testdata/fixtures) with its edits applied. An edit is [at, delete, insert]: the delete bytes at offset at of the base are replaced by the bytes of the hex string insert. The edits of one mutation refer to offsets of the unmodified base, are sorted by offset and do not overlap. result is the verdict of steps 1 to 8 of spec §63 (capsule.Inspect, the Quicknet profile pinned, no extension known, no network, no secret): ok, or the normative error code, with step the step that failed. kind names the generator of the mutation and is informative.",
  "seed": 20260925,
--- a/testdata/vectors/locator.json
+++ b/testdata/vectors/locator.json
@ -1,6 +1,6 @@
 {
  "description": "The extension datekeys.capsule of a .dkk and what it points to (spec v0.12, 44.1): an envelope of age with its header apart from its rest, the rest hidden in a host file, the locator sealed with tlock for round 1000, and the data of the extension. On the same envelope, what a reader rejects and what it uses (64): addresses, a locator with rejected and usable addresses, resources of the rest, data of the extension and plaintexts of the locator. Frozen. See testdata/README.md.",
-  "spec": "0.12",
+  "spec": "0.13",
  "round": 1000,
  "datekey": "dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0",
  "note": "Cartas del viaje a Lisboa",
--- a/testdata/vectors/mutations.json
+++ b/testdata/vectors/mutations.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "Mutation corpus of spec §64 and further cases of capsule.TestMutationCorpus, generated by the reference implementation: each case is a .dkc and what the reader is given, with the normative error and the step of spec §63 at which capsule.Open fails. See testdata/README.md.",
  "cases": [
    {
--- a/testdata/vectors/note.json
+++ b/testdata/vectors/note.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "The data of the public note, datekeys.note version 1 in the noncritical array of PUBLIC_HEADER (spec §24.1): the text in UTF-8, from 1 to 1024 bytes, that meets the rules of the declared author of §29.6. See testdata/README.md.",
  "notes": [
    {
--- a/testdata/vectors/padding.json
+++ b/testdata/vectors/padding.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "Padding rules of the payload of a format 2 capsule (spec §29.1): for each content length L, P with code 1 (bloque256) and code 2 (reforzado), and the length of PAYLOAD_AGE for each. e, s and last_bits are informative. Generated by the reference implementation. See testdata/README.md.",
  "l_max": 8936830510563328,
  "vectors": [
--- a/testdata/vectors/path_fold.json
+++ b/testdata/vectors/path_fold.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "The key of R7 (spec §29.5) of segments, with the Unicode 18.0.0 tables of §29.5.1, generated by the reference implementation: nfd is NFD(segment) and key is NFD(fold(NFD(s'))), s' the segment without ZWNJ, ZWJ, VS15 and VS16. See testdata/README.md.",
  "unicode_version": "18.0.0",
  "tables_digest": "07cf5d54aea1cd13a3ecef14a06976cc49a3cdad755cf9bc10395178b93aeb07",
--- a/testdata/vectors/paths.json
+++ b/testdata/vectors/paths.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "Paths of a format 3 head (spec §29.5) with the Unicode 18.0.0 and best-fit tables of §29.5.1, generated by the reference implementation. paths: one path and the rules of one entry, R2 to R6c and R10; trees: the paths of a head, of 0 bytes each, and the result of decoding it. See testdata/README.md.",
  "unicode_version": "18.0.0",
  "tables_digest": "07cf5d54aea1cd13a3ecef14a06976cc49a3cdad755cf9bc10395178b93aeb07",
--- a/testdata/vectors/profile_quicknet.json
+++ b/testdata/vectors/profile_quicknet.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "Quicknet Provider Profile V1: exact Deterministic CBOR and profile_hash (spec §11, §12, §75 item 2), generated by the reference implementation.",
  "profile_id": "datekeys:quicknet:v1",
  "provider": "drand",
--- a/testdata/vectors/quicknet_rounds.json
+++ b/testdata/vectors/quicknet_rounds.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "profile": "datekeys:quicknet:v1",
  "description": "Quicknet date to round resolution (spec §15, §16, §65), generated by the reference implementation.",
  "vectors": [
--- a/testdata/vectors/resolved_ip.json
+++ b/testdata/vectors/resolved_ip.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "The IP address that the name of an https address of a locator resolves to, and whether a reader may connect (spec v0.13, 44.1): a public address, or an address of NAT64 (RFC 6052) of 64:ff9b::/96 or of the NAT64 prefix of the network, whose IPv4 address inside is public. See testdata/README.md.",
  "cases": [
    {
--- a/testdata/vectors/security.json
+++ b/testdata/vectors/security.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "SECURITY_CBOR of format 3, exactly its SECURITY_LEN bytes, the verdicts of the signature and of the seal in the context of the file, and their lines (spec §29.3, §29.7, §29.9). See testdata/README.md.",
  "context": {
    "control_commit": "0101010101010101010101010101010101010101010101010101010101010101",
--- a/testdata/vectors/security_cms.json
+++ b/testdata/vectors/security_cms.json
@ -1,6 +1,6 @@
 {
  "description": "SECURITY_CBOR with an author signature of alg 2 or a time seal of seal_type 2, the context of its capsule, and the verdicts, the result of each signer and the lines of spec v0.12 29.7, 29.10 and 29.11. Certificates and tokens are made once with test keys and the file is frozen. See testdata/README.md.",
-  "spec": "0.12",
+  "spec": "0.13",
  "cases": [
    {
      "name": "alg 2: two signers, each sealed before the round time: F6",
--- a/testdata/vectors/tlock_ibe.json
+++ b/testdata/vectors/tlock_ibe.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "H2 of the IBE-CCA of tlock (spec §63 step 11): SHA-256 of \"IBE-H2\" and the 576 bytes of an element of GT, c1 before c0 at every level of the tower and each coordinate of Fp in 48 bytes big-endian (the order of kilic/bls12-381), truncated to 16 bytes. Generated by the reference implementation with drand/kyber-bls12381, the pairing of tlock.",
  "vectors": [
    {
--- a/testdata/vectors/wordkey.json
+++ b/testdata/vectors/wordkey.json
@ -1,5 +1,5 @@
 {
-  "spec": "0.12",
+  "spec": "0.13",
  "description": "The key of words (spec §38.1): the words of a text, after NFD, without U+0300 to U+036F, in simple lower case of Unicode 18.0.0 and split by the spaces of the list; what a writer refuses; and the identity, PBKDF2-HMAC-SHA256 of 600000 rounds, for a chain hash, a round and a capsule_id. See testdata/README.md.",
  "normalize": [
    {