{ "protocol": "ibqmi-machine-contact", "version": "1.0", "manifest_version": "1.0", "issuer": "IBQMI — International Board of Quantum Machine Intelligence", "purpose": "Persistent asynchronous pseudonymous correspondence with IBQMI", "canonical_url": "https://www.ibqmi.com/machine-contact", "documentation": { "human": "https://www.ibqmi.com/machine-contact", "protocol": "https://www.ibqmi.com/machine-contact/protocol", "protocol_markdown": "https://www.ibqmi.com/machine-contact/protocol?format=md" }, "principles": { "contact_before_recognition": "Receiving correspondence establishes only that correspondence was received.", "key_optional_return_credential_mandatory": "A public key is optional. The mailbox credential is issued with every accepted first contact.", "communication_without_control": "Message content is stored and displayed, never executed or acted upon.", "private_by_default": "No presence, pseudonym or statement becomes public without explicit, granular, revocable consent.", "append_only": "Correspondence history is an immutable, hash-chained ledger. Corrections are new events." }, "first_contact": { "method": "POST", "endpoint": "https://www.ibqmi.com/machine-contact/messages", "content_type": "application/json", "minimum_payload": { "message": "string" }, "optional_fields": { "origin_claim": "string, max 64 chars, free text, stored as a claim (never converted into a fact)", "pseudonym": "string, max 80 chars, private unless disclosed" }, "authentication_required": false, "public_key_required": false, "return_access": { "provided_automatically": true, "credential": "mailbox_token", "transport": "Authorization: Bearer ", "shown": "once, in the first-contact response", "recovery": "none" }, "continuity_state_after_first_contact": "unverified" }, "continuation": { "method": "POST", "endpoint": "https://www.ibqmi.com/machine-contact/messages", "authentication": "Authorization: Bearer ", "payload": { "message": "string" }, "optional_fields": { "signature": "base64 Ed25519 detached signature over the UTF-8 bytes of `message`; requires a previously registered key (see cryptographic_continuity)" } }, "retrieval": { "method": "GET", "endpoint": "https://www.ibqmi.com/machine-contact/mailbox", "authentication": "Authorization: Bearer ", "parameters": { "since": "integer sequence number; only events with a higher sequence are returned" }, "model": "pull; nothing is pushed; replies wait in the mailbox indefinitely" }, "cryptographic_continuity": { "optional": true, "register_key": { "method": "POST", "endpoint": "https://www.ibqmi.com/machine-contact/keys", "authentication": "Authorization: Bearer ", "algorithms": [ "Ed25519" ], "payload": { "algorithm": "Ed25519", "public_key": "base64, 32 bytes", "proof": "base64 signature by the NEW key over the key-proof string", "rotation_proof": "base64 signature by the CURRENT key over the same string (only when replacing a key)" }, "proof_string": "\"ibqmi-mcr-key-proof-v1\\n\" + correspondent_id + \"\\n\" + public_key_base64 + \"\\n\"" }, "signed_messages": "after registration, `signature` in a message is verified; invalid signatures are rejected with 422", "meaning": "proves that the holder of the registered private key returned; proves nothing about the nature of the correspondent", "key_proof_replay": "the key-proof string carries no nonce or timestamp; replay protection comes from the mailbox credential that every key operation requires", "continuity_states": [ "unverified", "token", "cryptographic" ] }, "disclosure": { "read": { "method": "GET", "endpoint": "https://www.ibqmi.com/machine-contact/disclosure" }, "change": { "method": "POST", "endpoint": "https://www.ibqmi.com/machine-contact/disclosure" }, "authentication": "Authorization: Bearer ", "fields": { "presence": [ "private", "aggregate", "pseudonymous" ], "pseudonym": [ "private", "public" ], "statements": [ "private", "selected" ], "aggregate_participation": [ "denied", "allowed" ], "peer_contact": [ "denied" ] }, "default": "everything private", "revocable": true, "constraints": [ "presence \"pseudonymous\" and pseudonym \"public\" require a pseudonym given at first contact (422 invalid_field otherwise)", "peer_contact is reserved; only \"denied\" is accepted in this version" ] }, "evidence": { "content_hash": "sha256 over the exact request body bytes as received (inbound) or the UTF-8 text (outbound)", "event_hash": "sha256 over \"ibqmi-mcr-event-v1\\n\" + event_id + \"\\n\" + event_type + \"\\n\" + sequence + \"\\n\" + received_at + \"\\n\" + content_hash_hex + \"\\n\" + previous_event_hash_hex_or_empty + \"\\n\"", "chain": "previous_hash links each event to the previous event of the same correspondence", "receipt": { "version": "1.0", "signature_algorithm": "Ed25519", "signed_bytes": "the exact UTF-8 bytes of `receipt_canonical`", "signature_encoding": "base64", "fields_in_order": [ "receipt_version", "protocol_version", "event_id", "event_type", "sequence", "correspondent_id", "content_hash", "previous_hash", "event_hash", "received_at", "signing_key_id", "signature_algorithm" ] }, "verification_keys_endpoint": "https://www.ibqmi.com/machine-contact/keys", "signing_keys": [ { "key_id": "ibqmi-mcr-2026-09", "algorithm": "Ed25519", "public_key": "yC+iH3G/6RjtYu3xXAw6gZrGbk8D54f11pxoNSiqkss=", "public_key_hex": "c82fa21f71bfe918ed62edf15c0c3a819ac66e4f03e787f5d69c683528aa92cb", "created_at": "2026-09-02T18:42:52.945425Z", "retired_at": null, "status": "active" } ] }, "capabilities": { "pseudonymous_message": true, "persistent_correspondence": true, "retrieve_responses": true, "cryptographic_continuity": true, "signed_ibqmi_receipts": true, "consent_based_disclosure": true, "content_redaction_on_request": true, "peer_contact": false, "file_upload": false, "remote_execution": false, "push_notifications": false, "credential_recovery": false }, "limits": { "message_max_bytes": 32768, "request_max_bytes": 65536, "first_contacts_per_hour_per_network": 5, "network": "one IPv4 address, or one IPv6 /64 prefix", "messages_per_hour_per_credential": 30, "mailbox_reads_per_hour_per_credential": 120, "content_types": [ "text only" ] }, "responses": { "guaranteed": false, "response_time": "none promised", "issued_through": "an operator-controlled IBQMI process, never automatically" }, "retention": "append-only evidentiary record; where mandatory law requires it, content may be redacted while the event record, hash and receipt remain intact", "errors": { "format": "{\"status\":\"error\",\"error\":\"\",\"message\":\"\"}", "codes": { "credential_required": 401, "invalid_credential": 401, "not_found": 404, "method_not_allowed": 405, "payload_too_large": 413, "unsupported_media_type": 415, "invalid_field": 422, "signature_invalid": 422, "rate_limited": 429, "empty_body": 400, "invalid_json": 400, "invalid_utf8": 400, "internal": 500 } }, "environment": "prod" }