chore: release v1.0.0-alpha.16

CHANGELOG.md

@@ -6,7 +6,7 @@ For the release process and SDK coordination, see [`docs/RELEASES.md`](docs/RELE
 
 ---
 
-## Unreleased — v1.0.0-alpha.16 (in progress)
+## v1.0.0-alpha.16 (2026-08-05)
 
 The "resource-bound authority" release: delegations can now name *where* a scope applies, not just *what* it permits.
 

README.md

@@ -167,7 +167,7 @@ go test ./...
 Or install as a module in your own project:
 
 ```bash
-go get github.com/identities-ai/ratify-protocol@v1.0.0-alpha.15
+go get github.com/identities-ai/ratify-protocol@v1.0.0-alpha.16
 ```
 
 ### TypeScript
@@ -185,7 +185,7 @@ npm test
 ### Python
 
 ```bash
-pip install ratify-protocol==1.0.0a15
+pip install ratify-protocol==1.0.0a16
 ```
 
 Or to run the conformance suite yourself:
@@ -201,7 +201,7 @@ pytest
 ### Rust
 
 ```bash
-cargo add ratify-protocol@1.0.0-alpha.15
+cargo add ratify-protocol@1.0.0-alpha.16
 ```
 
 Or to run the conformance suite yourself:
@@ -359,10 +359,10 @@ The 79 fixtures in `testvectors/v1/` are the canonical conformance set. **Any im
 
 | Implementation | Language | Conformance (`main`) | Install (latest release) |
 |---|---|---|---|
-| `github.com/identities-ai/ratify-protocol` | Go | ✅ 79/79 | `go get github.com/identities-ai/ratify-protocol@v1.0.0-alpha.15` |
+| `github.com/identities-ai/ratify-protocol` | Go | ✅ 79/79 | `go get github.com/identities-ai/ratify-protocol@v1.0.0-alpha.16` |
 | `@identities-ai/ratify-protocol` | TypeScript | ✅ 79/79 | `npm install @identities-ai/ratify-protocol` |
-| `ratify-protocol` | Python | ✅ 79/79 | `pip install ratify-protocol==1.0.0a15` |
-| `ratify-protocol` | Rust | ✅ 79/79 | `cargo add ratify-protocol@1.0.0-alpha.15` |
+| `ratify-protocol` | Python | ✅ 79/79 | `pip install ratify-protocol==1.0.0a16` |
+| `ratify-protocol` | Rust | ✅ 79/79 | `cargo add ratify-protocol@1.0.0-alpha.16` |
 | `sdks/c/` (`libratify_c`) | C / C++ | ✅ full C ABI conformance | pre-built archives or build from source: `sdks/c/` (Apache-2.0) |
 | *Swift* | — | planned | mobile wallet |
 | *Java / Kotlin* | — | planned | Android / JVM |

SPEC.md

@@ -1803,4 +1803,4 @@ Until v1.0.0-beta.1, the closure remains functional: when both fields are set on
 
 ---
 
-*v1.0.0-alpha.15 · Identities AI · CC-BY-4.0 · Patent Pending*
+*v1.0.0-alpha.16 · Identities AI · CC-BY-4.0 · Patent Pending*

sdks/c/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "ratify-c"
-version = "1.0.0-alpha.15"
+version = "1.0.0-alpha.16"
 edition = "2021"
 authors = ["Identities AI, Inc. <hello@identities.ai>"]
 license = "Apache-2.0"
@@ -31,7 +31,7 @@ std = []
 custom-entropy = ["getrandom/custom"]
 
 [dependencies]
-ratify-protocol = { path = "../rust", version = "1.0.0-alpha.15" }
+ratify-protocol = { path = "../rust", version = "1.0.0-alpha.16" }
 serde_json = "1"
 getrandom = { version = "0.2", features = [] }
 

sdks/c/cbindgen.toml

@@ -8,7 +8,7 @@ autogen_warning = "/* DO NOT EDIT — generated by cbindgen from sdks/c/src/lib.
 header = """
 /*
  * Ratify Protocol — C/C++ bindings
- * Version: 1.0.0-alpha.15
+ * Version: 1.0.0-alpha.16
  *
  * Cryptographic authorization for AI agents.
  * Hybrid Ed25519 + ML-DSA-65 (NIST FIPS 204).

sdks/c/include/ratify.h

@@ -1,6 +1,6 @@
 /*
  * Ratify Protocol — C/C++ bindings
- * Version: 1.0.0-alpha.15
+ * Version: 1.0.0-alpha.16
  *
  * Cryptographic authorization for AI agents.
  * Hybrid Ed25519 + ML-DSA-65 (NIST FIPS 204).

sdks/go/README.md

@@ -26,7 +26,7 @@ Beyond the one-shot delegate → present → verify round trip, this SDK impleme
 The Go SDK is the **reference implementation** and lives at the project root — not in this directory.
 
 ```go
-go get github.com/identities-ai/ratify-protocol@v1.0.0-alpha.15
+go get github.com/identities-ai/ratify-protocol@v1.0.0-alpha.16
 ```
 
 ```go

sdks/python/README.md

@@ -24,7 +24,7 @@ Beyond the one-shot delegate → present → verify round trip, this SDK impleme
 ## Install
 
 ```bash
-pip install ratify-protocol==1.0.0a15
+pip install ratify-protocol==1.0.0a16
 ```
 
 This pulls in two binary dependencies: `cryptography` (Ed25519 via OpenSSL) and `pqcrypto>=0.3.4` (ML-DSA-65). Both ship wheels for Linux / macOS / Windows on CPython 3.10+.

sdks/python/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ratify-protocol"
-version = "1.0.0a15"
+version = "1.0.0a16"
 description = "Delegated-authority proofs for human-agent and agent-agent interactions — Python reference SDK for the Ratify Protocol."
 readme = "README.md"
 authors = [{name = "Identities AI, Inc.", email = "hello@identities.ai"}]

sdks/python/src/ratify_protocol/__init__.py

@@ -216,7 +216,7 @@
     encode_verification_receipt,
 )
 
-__version__ = "1.0.0a15"
+__version__ = "1.0.0a16"
 
 __all__ = [
     # types

sdks/rust/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "ratify-protocol"
-version = "1.0.0-alpha.15"
+version = "1.0.0-alpha.16"
 edition = "2021"
 authors = ["Identities AI, Inc. <hello@identities.ai>"]
 license = "Apache-2.0"

sdks/rust/README.md

@@ -25,7 +25,7 @@ Beyond the one-shot delegate → present → verify round trip, this SDK impleme
 
 ```toml
 [dependencies]
-ratify-protocol = "1.0.0-alpha.15"
+ratify-protocol = "1.0.0-alpha.16"
 ```
 
 ## Quickstart

sdks/typescript/README.md

@@ -24,7 +24,7 @@ Beyond the one-shot delegate → present → verify round trip, this SDK impleme
 ## Install
 
 ```bash
-npm install @identities-ai/ratify-protocol@1.0.0-alpha.15
+npm install @identities-ai/ratify-protocol@1.0.0-alpha.16
 ```
 
 ## Three verbs, three examples

sdks/typescript/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@identities-ai/ratify-protocol",
-  "version": "1.0.0-alpha.15",
+  "version": "1.0.0-alpha.16",
   "description": "Delegated-authority proofs for human-agent and agent-agent interactions \u2014 TypeScript reference SDK for the Ratify Protocol.",
   "type": "module",
   "main": "./dist/index.js",