{ "schema_version": "1", "updated": "2026-10-26", "environment": "reference-sandbox", "deployment_stage": "managed-pilot", "production_trust_network": false, "protocol_publication": { "document_revision": "WD-02", "publication_revision": "WD-02-E1", "errata_id": "E1", "base_revision_url": "https://xcim.org/spec/v0.1/wd-02/", "status": "published-working-draft", "published": "2026-10-15", "url": "https://xcim.org/spec/v0.1/wd-02-e1/", "schema_catalog": "https://xcim.org/spec/v0.1/wd-02-e1/schemas/", "receipt_schema": "https://xcim.org/schemas/wd-02/receipt.schema.json", "identity_evidence_schema": "https://xcim.org/schemas/wd-02/identity-evidence.schema.json", "issuer_metadata_schema": "https://xcim.org/schemas/wd-02/0.2/issuer-metadata.schema.json", "schema_count": 33, "core_wire_version": "0.1", "experimental_receipt_versions": [ "0.2" ], "production_recommended": false }, "reference_issuer": "Emabled", "capabilities": [ { "id": "c01-sr01-live-pilot", "name": "C01/SR01 consent lifecycle", "status": "verified-bounded-testnet-pilot", "label": "Verified bounded testnet pilot \u00b7 26 Oct 2026", "detail": "One fresh MuMaps consent: CURRENT, cached CURRENT without renewal, incremental REVOKED and persisted REVOKED. Both anchors verified under admitted testnet trust. Same operator; pilot closed; production gates remain." }, { "id": "company-onboarding", "name": "Company onboarding", "status": "operational-pilot", "label": "Operational pilot", "detail": "Company workspace, application setup, site DNS, signed manifest, sending-domain authority and return configuration." }, { "id": "hosted-consent", "name": "Identity and hosted consent", "status": "verified-managed-pilot", "label": "Verified managed pilot", "detail": "MuMaps registration uses one Google authorization, followed by a separate, optional purpose-specific consent decision." }, { "id": "receipts-revocation", "name": "Receipts and revocation", "status": "verified-managed-pilot", "label": "Verified managed pilot", "detail": "Signed receipt issuance, authenticated API revocation and subsequent list re-evaluation were exercised end to end." }, { "id": "esp-list-validation", "name": "Managed ESP list evaluation", "status": "verified-managed-pilot", "label": "Verified managed pilot", "detail": "Separate ESP workspace with MFA, revocable company authorization, JSON/CSV jobs, CSV/ZIP console uploads and authenticated result exports." }, { "id": "webhooks", "name": "Lifecycle webhooks", "status": "deployed-external-test-pending", "label": "Deployed; external test pending", "detail": "Signed delivery infrastructure, company delivery history and recovery controls are implemented; an external receiver test remains a release gate." }, { "id": "draft-artifacts", "name": "Draft implementation artifacts", "status": "published-draft", "label": "Published draft", "detail": "Working Draft 02 with Erratum E1 publishes 33 unchanged schemas and corrected Python/Node tools, with 12 new E1 regression tests. Original WD-01 and WD-02 releases remain unchanged; synthetic checks are not live proof verification." }, { "id": "public-proof-verification", "name": "Public proof verification", "status": "verified-amoy-testnet-snapshot", "label": "Verified test-network snapshot", "detail": "First public batch finalized on a Polygon test network: 19 events and four MuMaps proofs, checked by separate verification implementations. Historical evidence only; the five-minute status window has expired. Not mainnet or independent sender/receiver interoperability." }, { "id": "sdk-distribution", "name": "Emabled SDK distribution", "status": "private-tested-not-published", "label": "Private packages tested", "detail": ".NET and TypeScript integration packages have consumer tests; public npm/NuGet releases are pending." } ], "managed_pilot": { "id": "mumaps-managed-pilot", "application": "MuMaps", "date": "2026-10-14", "status": "verified-managed-pilot", "identity_profile": "oidc-01", "independent_interoperability": false, "completed": [ "company-configuration", "google-registration-and-hosted-consent", "signed-receipt-and-bound-return", "separate-esp-workspace-and-mfa", "company-scoped-esp-authorization", "csv-and-zip-evaluation-and-export", "api-revocation-and-list-re-evaluation" ], "observed_results": [ "EMABLED_CONSENT_ACTIVE", "XCIM_REVOKED", "XCIM_NONE" ], "public_proof_verification": "verified-amoy-testnet-snapshot", "scope": "Operator-managed application and ESP pilot using the Emabled reference issuer; not an independent sender/receiver interoperability result.", "report_url": "https://xcim.net/interop/#managed-pilot" }, "first_public_batch": { "batch_sequence": 1, "published_date": "2026-10-14", "network": "eip155:80002", "network_name": "Polygon Amoy", "chain_id": 80002, "testnet": true, "mainnet": false, "issuer_id": "urn:xcim:issuer:emabled.com", "contract": "0xfd7FdA6F5eab64D74F90A70995AAF13d54f272a9", "transaction_hash": "0xa2f9b9f5533add0c3642253b701a88f1c765543ce85f4886a287ddc410efb7e9", "block_number": 50191125, "block_hash": "0x8f6423cdf623969b6220ea8911ae832360074616e7213ee379c32320aa072ba3", "anchor_status": "finalized", "event_count": 19, "event_root": "CqidWhp0mhkgaQt0Izy8yD6wVVaCz7N-4aOdIVUkYw0", "state_root": "4nl4R15TJq6Ml8bf6SIIFMTvM5xsLaiQz_BdT7fTRhg", "batch_manifest_hash": "V0D2PBoRkMcYVYFwu5dMsBvX_GQK3KVGjPGgUF71pcQ", "proof_bundle_set_hash": "BTrc4tnTDfM1RBOojXL_I9fVBQv2Sy0B9rZI-mbL1SM", "proof_count": 4, "proof_states_at_publication": { "active": 3, "revoked": 1 }, "this_update": "2026-10-14T21:32:23.181558Z", "next_update": "2026-10-14T21:37:23.181558Z", "status_evidence": "historical-snapshot-not-current-status", "trust_model": "explicit-receiver-pins-no-accreditation", "independent_interoperability": false, "verification_observed_at": "2026-10-14T21:36:08Z", "observed_results": [ "XCIM_PASS", "XCIM_REVOKED", "XCIM_PASS_CACHED", "XCIM_LOG_PROOF_FAIL", "XCIM_STATUS_INDETERMINATE", "XCIM_STATUS_STALE" ], "scope": "Operator-managed MuMaps pilot verified using separate receiver and Python implementations. Three active control receipts concern the same identity, not three customers. Cached-source unavailability was injected in the receiver; no production outage was induced.", "public_urls": { "transaction": "https://amoy.polygonscan.com/tx/0xa2f9b9f5533add0c3642253b701a88f1c765543ce85f4886a287ddc410efb7e9", "anchor": "https://id.emabled.com/v1/public/batches/1/anchor", "proof_set": "https://id.emabled.com/v1/public/batches/1/proof-set", "report": "https://xcim.net/interop/#amoy-batch" } }, "published_artifacts": { "repository": "https://github.com/saezbaldo/xcim-implementers", "commit": "080a7f7311444c0985475239ec269c52b0c77234", "schema_count": 22, "status": "published-draft" }, "shared_components": { "issuer_registry": "not-public", "event_root": "published-amoy-testnet-snapshot", "state_root": "published-amoy-testnet-snapshot", "anchor": "finalized-amoy-testnet", "resolver": "not-released" }, "recipient_portal": "deferred-not-available", "commercial_subscription": "not-launched", "next_gates": [ "operational-preflight-and-monitoring", "historical-anchor-refresh", "recipient-and-esp-workflows", "scale-and-independent-integration", "external-review-and-production-trust-admission", "operate-renewed-batches-and-current-proof-delivery", "replay-csv-zip-public-status-with-fresh-anchored-evidence", "publish-reviewed-verifier-distribution-and-trust-profile", "publish-reviewed-sdk-packages", "complete-external-webhook-test", "recruit-independent-sender-and-receiver", "run-paired-interoperability-window" ], "standardization": { "revision": "p1-as01-an01-nb01-f01", "phase": "individual-internet-draft-published", "updated": "2026-10-26", "design_decisions": { "D01": "historical-direction-superseded-by-consent-scope", "D02": "historical-direction-superseded-by-consent-scope", "D03": "historical-direction-superseded-by-consent-scope", "D04": "historical-direction-superseded-by-consent-scope", "D05": "historical-direction-superseded-by-consent-scope", "D06": "historical-direction-superseded-by-consent-scope" }, "ietf_submission": "published", "url": "https://xcim.org/standardization/", "artifacts_url": "https://xcim.org/standardization/consent/", "schema_count": 7, "fixture_cases": { "binding": 91, "positive": 7, "schema": 24, "headers": 20 }, "can_assert_xcim_pass": false, "independent_interoperability": false, "external_security_review": "pending", "dependency_register": "https://xcim.org/standardization/consent/", "base_p1_revision": "p1-01", "review_bundle_path": "nb01/xcim-nb01-f01.zip", "authority_state_proposal": { "revision": "as-01-proposal-01", "status": "historical-experiment-not-current-core", "url": "https://xcim.org/standardization/authority-state/", "candidate_contracts": 8, "planned_test_scenarios": 24, "as_schema_count": 19, "implementation_status": "offline-fixtures-only", "anchor_adapter": "an01-f01-adopted-local-evm", "trial_parameters_measured": false, "candidate_limits_seconds": { "state_max_age": 300, "snapshot_cadence": 60, "root_manifest_max_age": 86400, "clock_uncertainty_max": 60 }, "decision_points": [ "A1", "A2", "A3", "A4", "A5", "A6" ], "decision_points_status": "A1-A6-adopted-project-direction", "historical_status": "accepted-project-direction-fixtures-available" }, "review_bundle_root": "xcim-nb01-f01", "as01_artifacts": { "revision": "AS01-F01", "url": "https://xcim.org/standardization/as01/", "schema_count": 19, "schema_cases": 37, "scenario_cases": 97, "authority_positive": 8, "transition_artifacts": 2, "adversarial": 87, "can_assert_xcim_pass": false, "live_anchor_verifier": false, "trial_parameters_measured": false, "dependency_register": "https://xcim.org/standardization/as01/DEPENDENCIES.md", "historical_status": null, "status": "historical-experiment-not-current-core" }, "anchor_adapter_proposal": { "revision": "AN01-P01", "status": "historical-experiment-not-current-core", "url": "https://xcim.org/standardization/anchor-adapter/", "recommended_network": { "name": "Polygon Amoy", "chain_id": 80002, "scope": "opt-in-testnet-only" }, "recommended_finality_policy": "amoy-milestone-receiver-node-01", "two_rpc_mode": "observation-test-only-not-consensus-fallback", "abi_entries": 19, "selectors": 16, "event_topics": 2, "negative_layout_cases": 8, "planned_runtime_scenarios": 20, "executed_runtime_scenarios": 0, "contract_implemented": true, "contract_deployed": false, "live_anchor_verifier": false, "can_assert_xcim_pass": false, "parameters_measured": false, "candidate_limits_seconds": { "as_state_max_age": 300, "finalized_head_max_age": 120, "local_view_cache_max_age": 30, "rpc_total_deadline": 10 }, "decision_points": [ "N1", "N2", "N3", "N4", "N5", "N6" ], "dependency_register": "https://xcim.org/standardization/anchor-adapter/CONTRACT-PROPOSAL.md", "contract_compiled": true, "decision_points_status": "N1-N6-adopted-project-direction", "implementation_url": "https://xcim.org/standardization/an01/", "runtime_scenarios_counting": "original-AN-T01-T20-end-to-end; local-EVM-cases-counted-separately", "historical_status": "accepted-project-direction-local-evm-fixtures" }, "an01_artifacts": { "revision": "AN01-F01", "url": "https://xcim.org/standardization/an01/", "status": "historical-experiment-not-current-core", "schema_count": 8, "schema_cases": 19, "artifact_cases": 65, "artifact_positive": 4, "artifact_adversarial": 61, "evm_cases": 34, "evm_steps": 46, "evm_context_checks": 2, "compiler": "0.8.30+commit.73712a01.Emscripten.clang", "evm_target": "paris", "contract_implemented": true, "contract_compiled": true, "contract_deployed_publicly": false, "live_anchor_verifier": false, "consensus_verified": false, "can_assert_xcim_pass": false, "parameters_measured": false, "dependency_register": "https://xcim.org/standardization/an01/DEPENDENCIES.md", "historical_status": "local-evm-and-synthetic-artifact-fixtures" }, "nb01_artifacts": { "revision": "NB01-F01", "url": "https://xcim.org/standardization/nb01/", "status": "historical-experiment-not-current-core", "schema_count": 7, "schema_cases": 12, "wire_cases": 62, "wire_positive": 2, "wire_adversarial": 60, "store_checks": 8, "transport_checks": 18, "receiver_bootstrap_authentication_implemented": true, "read_only_node_collector_implemented": true, "transport": "numeric-loopback-HTTPS-exact-DER-pin", "receiver_admin_separate_from_issuer": true, "node_floors": "sqlite-CAS-and-quarantine-tested-not-live-admitted", "real_bootstrap_admitted": false, "amoy_node_operated": false, "live_amoy_capture": false, "consensus_proof_verified": false, "can_assert_xcim_pass": false, "trial_parameters_measured": false, "reviewed_candidates": { "bor": "v2.10.3", "heimdall_v2": "v0.12.2", "status": "API-source-review-only-not-installed-or-admitted" }, "dependency_register": "https://xcim.org/standardization/nb01/DEPENDENCIES.md", "historical_status": "implemented-tested-with-mocks-and-loopback-TLS" }, "amoy_operation": "paused", "ietf_draft": { "name": "draft-saez-xcim-04", "series": "draft-saez-xcim", "revision": "04", "title": "eXplicit Consent-Identified Mail (XCIM)", "status": "active-individual-internet-draft", "intended_status": "Experimental", "published_on": "2026-10-26", "official_url": "https://datatracker.ietf.org/doc/draft-saez-xcim/04/", "html_url": "https://www.ietf.org/archive/id/draft-saez-xcim-04.html", "ietf_endorsement": false, "working_group_adoption": false, "approved_rfc": false }, "web_release": "2026-10-26-c01-evidence", "scope_correction": { "status": "published", "target_revision": "02", "target_name": "draft-saez-xcim-02", "published": true, "scope": "Explicit recipient-to-sender consent for communication types, independently attested and blockchain anchored; independent of individual messages.", "historical_message_profiles": "P1/MAIL01 are outside the corrected consent core. AS/AN/NB remain historical experiments, not required core profiles.", "historical_tests_validate_corrected_revision": false, "submission_id": 170643, "published_on": "2026-10-20" }, "address_control": { "draft_revision": "03", "alternatives": [ "evp-01", "oauth-01", "oidc-01" ], "selection": "any-one-explicitly-admitted-method-with-required-verification", "oauth": "authorization-code-PKCE-and-authenticated-current-account-provider-API", "explicit_consent": "separate-affirmative-recipient-decision-for-identified-sender-and-types", "verification_alone_grants_consent": false, "production_interoperability_claimed": false }, "shared_revocation": { "profile": "xcim-consent-sync-01", "draft_revision": "04", "status": "bounded-live-testnet-pilot-completed", "url": "https://xcim.org/standardization/shared-revocations/", "original_grants": "C01-signed-bytes-and-finite-expiry-preserved", "individual_status_required_on_sr01_path": false, "shared_freshness_seconds": 300, "limit_status": "experimental-not-measured-SLA", "recipient_reconsent_for_refresh": false, "checkpoint_refresh_requires_chain_transaction": false, "component_tests": { "passed": 34, "total": 34, "scope": "shared-history-component-only" }, "integrated_verifier": true, "durable_recovery_verified": true, "operational_deployment": false, "independent_interoperability": false, "performance_measured": false, "verification_scope": "One real consent and withdrawal; separate receiver processes retained state. Pilot now disabled; not general crash-recovery certification.", "evidence_url": "https://xcim.net/interop/c01-2026-10-26/" }, "blockchain_integration": { "direction": "polygon-publication-through-rpc", "self_hosted_node_required_for_publication": false, "universal_esp_node_requirement": false, "node_provisioning_planned": false, "publication_status": "two-real-C01-batches-verified-testnet-pilot-closed", "finality_verification": "verified-under-explicitly-admitted-testnet-adapter-and-HTTPS-bootstrap", "network_selection": "eip155:80002-testnet-only", "historical_node_experiments": "not-adoption-prerequisites", "operational_c01_proof": true, "proof_scope": "Historical bounded pilot on 2026-10-26; not a current sending authorization or production deployment", "evidence_url": "https://xcim.net/interop/c01-2026-10-26/" }, "c01_pilot": { "date": "2026-10-26", "draft_revision": "04", "status": "completed-bounded-testnet-pilot", "network": "eip155:80002", "participants": "MuMaps, Emabled test ESP and separate local receiver; same project operator", "recipients": 1, "observed_results": [ "CONSENT_CURRENT", "CONSENT_CURRENT", "CONSENT_REVOKED", "CONSENT_REVOKED" ], "original_consent_renewed": false, "consent_and_withdrawal_anchors_verified": true, "runtime_enabled": false, "production_ready": false, "independent_interoperability": false, "emails_sent": 0, "trust_bootstrap": "Operator-approved PublicNode HTTPS checkpoint; testnet only", "withdrawal": "Explicit human request in chat executed through authenticated MuMaps API; actor=sender", "incident_request_to_receiver_seconds": 280, "normal_latency_sla_established": false, "report_url": "https://xcim.net/interop/c01-2026-10-26/", "summary_url": "https://xcim.org/evidence/c01/", "evidence_url": "https://xcim.net/interop/c01-2026-10-26/summary.json", "production_gates": [ "operational-preflight-and-monitoring", "historical-anchor-refresh", "recipient-and-esp-workflows", "scale-and-independent-integration", "external-review-and-production-trust-admission" ] } } }