GAP conformance
Open suiteProve your implementation.
Four tiers. One open suite.
Any GAP implementation, SynOI's or anyone else's, can run the same conformance suite against itself. Conformance is self-certified against an open test corpus, not gatekept by SynOI. The suite and its scoring rules are public. The vectors themselves are generated directly from the reference implementation's OID derivation, not hand-authored, so they are normative: matching output proves interoperability, not agreement with a paragraph of prose.
Tiers
L1 to L4. Implementors can ship L1 and progress upward.
CDRO validation
Every declaration, grant, invocation, and receipt validates as a well-formed Content-addressed, Deterministic, Replayable Object: canonical form, SHA-256 OID derivation, stable hashing.
Grant lifecycle + policy
Declare, grant, and invoke phases are implemented correctly, including grant scoping, expiry, and per-tenant policy evaluation (allow / deny / require-approval).
HITL channels
At least one human-in-the-loop channel adapter (mobile, Slack, SMS, desktop, or email) is implemented per the GAP channel-adapter contract, with the approval chain carried in the receipt.
Hybrid signatures + authorized axis + federated revocation
Hybrid Ed25519 + ML-DSA-65 (NIST FIPS 204) signing on every receipt, the authorized-axis classification (authorized vs orphaned), and federated revocation across at least actor-local and tenant-wide scopes.
The badge
Run the suite, publish the result, show the badge.
The conformance suite outputs a signed result object naming the tier reached. Projects that pass link back to their suite run and add a status badge to their own README, pointed at this page. There is no paid certification step; the suite is CC0 and self-runnable.
Conformant projects
Public, self-reported. Seeded with SynOI's own reference implementation.
This list is manually curated today. To add your project once it passes the suite, open a PR against the conformance repo linked above.
Run the suite against your implementation.
CC0, self-runnable, no gatekeeping. The suite tells you which tier you actually reached.