# Reference vectors

What atproto's reference implementations make of fixed keys, for the parts
the interop vectors leave out. `identity.json` is from `identity.mjs`, run
against @did-plc/lib 0.0.4 and the space alpha's @atproto/crypto and
@atproto/xrpc-server (0.0.0-spaces-alpha-20261022141228): PLC operations
and the DIDs they make, the DID document the directory serves, and a
service-auth JWT. `knotless.json` is a service-auth JWT knotless's own
client signs (`knotless::crypto::P256Key::sign_jwt`).

`space-vectors.json` is pds.js's (`test/fixtures/space-vectors.json`),
made by running `@atproto/space` (its `generatedFrom` names the build): the
LtHash set hash, a space repo's commit, its MAC and MAC header and its STAR
archive, a record's MAC, a KEM decapsulation and its want-MAC header, and
an HTTP signature, which the credentials' pull reads.

`space-meta.json` is from `space-meta.mjs`, run against `@atproto/space`
0.0.0-spaces-alpha-20261029171913, the first alpha with a space meta
archive (exportSpaceMeta's): two archives it writes and what it reads
back, and archives it refuses (its own tests' cases, built as they build
them), each with its refusal. That build's published dependency ranges
resolve `@atproto/lex-cbor` and `@atproto/lex-data` to a stray `0.0.0`
whose own dependencies are `workspace:*`, so install it with each of
`@atproto/{car,crypto,syntax,lex-cbor,lex-data}` pinned to the same
version in `overrides`.


`jose.json` is from `jose.mjs`, run against jose 5.10.0 (panva's, which
@atproto/oauth-provider checks DPoP proofs and client assertions with):
fixed P-256 and secp256k1 keys' public JWKs and RFC 7638 thumbprints, a
DPoP proof each signs, and RFC 9449's own example key and thumbprint.

`lexicon.json` is from `lexicon.mjs`, run against @atproto/lexicon 0.7.18
(installed on its own, in a directory of its own) over a checkout of
lexicon.js (github.com/bigmoves/lexicon.js), whose data, format and
end-to-end cases it reads: each case's lexicons, the def it is checked
against, the value, and the reference's verdict, with a few cases of this
crate's own. `tests/lexicon.rs` holds where `atproto::lexicon` departs
from it, and its module says why.