ENC Protocol — Spec

The normative protocol spec, divided by dependency layer. The kernel holds the protocol math and canonical semantics; the node realizes it at runtime; and the app layer — enclave profiles and confidentiality plugins — builds on top.

Kernel

Protocol math and canonical semantics.

• Protocol summary — trust model, core abstractions, cryptography, wire protocol, event semantics, lifecycle
• RBAC — RBAC v2, contexts, manifests, authorization, per-event processing
• Sparse Merkle Tree — state and proof semantics
• Certificate Transparency — log and proof bundles

Node

Node, server, and runtime behavior that realizes the kernel.

• Node API — REST / WS / session / errors, hooks, DataView surfaces
• Migration — migration modes, checkpoints, backup / restore
• ZK validity proofs — zero-knowledge folded validity proofs

Enclaves

The enclave profile catalog and per-profile semantics.

• Catalog
• Personal
• DM
• Group
• Registry

Plugins

Confidentiality plugins and the cryptographic suite registry.

• Catalog
• Cryptographic suites
• ratchet-pair
• mls-lazy
• ecdh-envelope
• identity-aead