# SOVEREIGN.md — snapkitty-sovereign-addr Covenant

## Sovereign Addressing Standard

**SNAPKITTY-SOVEREIGN-ADDR-1**

This crate implements non-recursive artifact addressing for the SnapKitty ecosystem.

## Core Thesis

```
Same semantic artifact.
Same canonical bytes.
Same sovereign address.
Same WORM receipt.
```

## Algorithm

1. Validate JSON admissibility (non-recursive staged traversal)
2. Normalize all strings to Unicode NFC
3. Serialize canonical JSON (sorted keys, no whitespace)
4. Hash canonical bytes with SHA-256
5. Emit snapaddr:<64hex>
6. Generate WORM receipt
7. Never recurse in validation rules

## Invariants

1. **No Recursion**: All validation is staged traversal, never recursive
2. **Deterministic**: Same input always produces same output
3. **WORM Sealed**: Every artifact is write-once, read-many
4. **Fail-Closed**: Any error terminates processing
5. **Observable**: Every intermediate state is inspectable

## Rules

- `artifact(A)` — Any JSON value is an artifact
- `json_admissible(A)` — Artifact passes admissibility checks
- `nfc_ok(A, N)` — All strings normalized to NFC
- `snap_canonical(N, B)` — Canonical bytes produced
- `sha256_digest(B, D)` — SHA-256 of canonical bytes
- `snap_address(A, Addr)` — Sovereign address computed
- `accepted(A, Addr)` — Artifact accepted
- `rejected(A, Reason)` — Artifact rejected with reason
- `worm_receipt(A, Addr, Seal)` — WORM receipt generated

## Seal

```
SNAPADDR-NONREC-001
Normalize. Canonicalize. Hash. Seal. Govern.
Same artifact. Same address.
No recursion. No borrowed thesis.
```