Spec v0.16 draft: Astra's review of v0.15

A valid seal without accuracy no longer proves that it came before the
unlock date: S5, with its reason, and a reason of its own for a token of
the ETSI BTSP policy (29.7, 29.11). The recovery annex derives a key of
words without DateKeys software (79.7, new): a recipe without tables for
the letters of the DateKeys lists, and UnicodeData.txt of Unicode 18.0.0,
named by its SHA-256, for any other text, with two vectors. The last chunk
of an age file may be full (79.5). A signature with certificates keeps the
chains without their roots and the OCSP responses that fit, and the writer
says what it leaves out (29.10, rules 21 and 22). drand's JSON is read
strictly: no repeated names, exact names after their escapes, an integer
round from 1 to 2^53 - 1 (47.1). Errata in 1, 74, 77 and 79.

No format changes. SpecVersion stays 0.15 until the author approves.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

spec/README.md

@@ -80,6 +80,18 @@
   software. It changes no format of `.dkc` or `.dkk`, and one verdict: a
   valid release in hand opens a capsule with a clock behind its round time.
   Its §76 records each change with its case.
+- `DateKeys_Protocol_Specification_v0.16.md`: the draft v0.16 (7 October
+  2026), not yet approved, on the branch `v0.16`. It fixes what Astra's
+  review of v0.15 found: a valid seal without `accuracy` no longer proves
+  that it came before the unlock date (S5, with its reason); the recovery
+  annex derives a key of words without DateKeys software, with a recipe
+  without tables for the letters of the DateKeys lists and `UnicodeData.txt`
+  of Unicode 18.0.0, named by its SHA-256, for any other text; the last
+  chunk of an `age` file may be full; a signature with certificates keeps
+  the chains without their roots and the OCSP responses that fit, and the
+  writer says what it leaves out; and drand's JSON is read strictly, with no
+  repeated names, exact names and an integer round. It changes no format.
+  Its §76 records each change with its case.
 - `datekeys.cddl`: the CBOR schemas of v0.15, those of v0.12, v0.13 and v0.14 with the rule `release` added, the three control
   versions and the security and head objects of format 3 included, with the
   encoding rules CDDL cannot express. Those of v0.9 and v0.8.2 are at the tags