Submission + bundle + attestation + Portability Verifier — four artifacts agree without contacting H33.
"A regulator downloads Submission + Bundle + Attestation + Verifier and independently verifies the submission without contacting H33, the submitter, or any third-party vendor." — Eric, June 4 2026
The TDA v0.1 release proved three artifacts agree without H33: bundle + attestation + Portability Verifier. This release adds a fourth: a firm-signed regulatory submission that binds a specific (regulator, inquiry, bundle, attestation, Portability Verifier) tuple at a specific moment in time. The regulator's submission verifier runs six structural checks; the TDA loop runs inside it. Same substrate. Same Q0/Q0.5. One new consumer class.
Q0 — Who bears risk? Never H33. The firm signs the transmittal. H33 is not in the submission path and hosts no submission registry.
Q0.5 — Who owns the judgment? Always the regulator. The submission verifier surfaces structural verdicts. It never asserts compliance, recommends action, or judges the firm's decisions.
Money quote — Submission ≠ Adjudication. Parallel to Attestation ≠ Underwriting. Submission is a structural act the firm performs against the regulator. Adjudication is the regulator's act. H33 ships infrastructure for the first; H33 does not participate in the second.
v0.1.0 release
The four-artifact loop, end to end
A regulator needs four downloads. Each comes from a different surface; together they prove agreement without H33, the submitter, or any third-party vendor.
Run the loop
chmod +x h33-verify-submission-v0.1.0-aarch64-apple-darwin
chmod +x h33-verify-attestation-v0.1.0-aarch64-apple-darwin
chmod +x h33-independent-canonical-replay-v0.1.0-aarch64-apple-darwin
./h33-verify-submission-v0.1.0-aarch64-apple-darwin \
--submission sample-submission-claim-84711.regulatory_submission.json \
--bundle tenant_insurance_claim_44962d9b-25f5-5622-bd9a-98d5580bb8a2_enterprise_bundle.tar.gz \
--attestation sample-attestation-claim-84711.tda_v1.json \
--verifier-binary h33-independent-canonical-replay-v0.1.0-aarch64-apple-darwin \
--attestation-verifier h33-verify-attestation-v0.1.0-aarch64-apple-darwin
- 1 ✓ Scope manifest PQ signatures verify + officer fingerprint internally consistent
- 2 ✓ Artifact hash anchors match (bundle · attestation · verifier · bundle size)
- 3 ✓ TDA loop verification PASS — delegates to h33-verify-attestation; bundle + attestation + verifier all agree
- 4 ✓ Every in-scope decision pinned as eligible in attestation
- 5 ✓ in_scope_ids structurally present in bundle (no scope smuggling)
- 6 ✓ scope_window consistent with bundle timeline (no time-window smuggling)
- → OVERALL: PASS ✓ — submission + bundle + attestation + verifier all agree. No H33 contact required.
Substrate-reuse claim — the platform argument
This release reuses the existing Bundle + Attestation + Portability Verifier triple unchanged. It adds two primitives: the scope manifest schema and the submission verifier binary. Constitutional layer Q0 + Q0.5 carries forward unchanged.
TDA proved the carrier consumption pattern (Layer 3 vertical #1). Regulatory Submission v0.1 proves the regulator consumption pattern (Layer 3 vertical #2). Same substrate. Same constitutional rules. Auditor (#3), Acquirer (#4), and Governance team (#5) are the next consumer classes — each will inherit the same Q0/Q0.5 and consume the same substrate.
Honest v0.2 deferrals
- Multi-platform binaries (linux x86_64 · aarch64 · darwin x86_64)
- PQ-signed RELEASE artifacts (release signing key ceremony required)
- Production firm-side signing key ceremony (v0.1 uses dev keypair per
--signing-key-dir) - Byte-deterministic builds across machines (containerized toolchain)
- Submission revocation registry
- Supplemental + correction submission workflow detail (
supersedes/supplementsfields exist; semantics await v0.2) - Multi-regulator harmonization conventions (portal adapters, schema mappings)
- Regulator-facing UX beyond the CLI submission verifier
- Workspace UI surface for the
regulatory_submissionevent in the firm's Twin - CI/CD release automation