Cube Protocol

Vendor-neutral content integrity for AI artifacts.

Cube Protocol defines a compact, verifiable packet format for AI-ready knowledge transfer across files, APIs, QR codes, agent systems, caches, and archives.

It is designed as independent prior art for portable artifact integrity: deterministic bytes, content hashes, signatures, schema validation, and provenance links.

See ABOUT.md for positioning and docs/CONTENT_INTEGRITY_PROFILE.md for the A2A-compatible artifact integrity profile.

Scope (v1.0)

• Canonical cube string: QRL.VERSION.ID.N.K.HASH.SIGNATURE.PAYLOAD
• Integrity: SHA‑256 of canonical JSON payload
• Authenticity: ECDSA (secp256k1) signature over the HASH
• Payload families: text_to_cube, video_generation, memory_data, knowledge_seed, custom
• Non‑goals (v1.0): Encryption (planned v2), multi‑sig (v2), revocation registry (v2)

Layout

• /docs/SPEC.md — human‑readable specification
• /docs/CONTENT_INTEGRITY_PROFILE.md — RFC 8785/JCS artifact integrity profile for Cube and A2A-compatible artifacts
• /schemas/ — JSON Schemas + ABNF grammar
• /sdk/js/ — TypeScript SDK skeleton (encoder/decoder contracts)
• /tests/ — test vectors and conformance cases

A2A Artifact Integrity

Cube Protocol now includes a draft Content Integrity Profile v1 for portable artifact verification:

• RFC 8785 JSON Canonicalization Scheme (JCS), not ad hoc sorted-key JSON
• sha256:<hex> content addressing
• JWS-compatible signatures with kid support
• signed links[] provenance chains
• schemaRef binding for semantic validation

This profile is designed to be usable as an optional A2A artifact extension without requiring A2A implementations to depend on Cube.

Repository Status

This repository is a reference specification and conformance workspace. It is intentionally small so protocol reviewers can inspect the core ideas without adopting a runtime or product stack.

Quickstart

# install (SDK stub)
cd sdk/js
npm i
npm run build

License

MIT — see LICENSE

---

🛡️ Identity & Compliance

• Authority Node: 0x923-SEA
• Verification: authority.cube
• Enforcement: IDENTITY_ENFORCEMENT_DIRECTIVE.md