[SCITT] Re: async completion 2.1.4 question

Jon Geater <jon.geater@datatrails.ai> Sat, 10 January 2026 13:01 UTC

Return-Path: <jon.geater@datatrails.ai>
X-Original-To: scitt@mail2.ietf.org
Delivered-To: scitt@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 3E7EEA5C9B96 for <scitt@mail2.ietf.org>; Sat, 10 Jan 2026 05:01:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=datatrails.ai
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bJxsnyiUeFQm for <scitt@mail2.ietf.org>; Sat, 10 Jan 2026 05:01:08 -0800 (PST)
Received: from LO0P265CU003.outbound.protection.outlook.com (mail-uksouthazon11022135.outbound.protection.outlook.com [52.101.96.135]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id A7D2EA5C9B8F for <scitt@ietf.org>; Sat, 10 Jan 2026 05:01:08 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Hzo3SuKucCyMwgadvvKSbMyZ7w2H12VIRi/BCqIT/GP+ozkwOrFIWDdW8MuaHh0KJsO6vYgodII1M2gj87674WDJiCpwqwCJG/DlkjW/ubbClzXkD8xia6cR+iuhiLNQrcTxDcP47knhGkxMMRA4qKS3q9kUm2FbAePRFGpBE0t2IV6skeK1sHurKOMmIjjmKuF6SUsMwQjlZV6lMXBaN7ENu7uZFmpLmHM1y1rw/Mi9H/JONnSDMf3o2CgosvPqSOjtqPRtyqty3x2cEQr5bkPZIImzFZJebxk/7/tdEqiICJ1pMwhjHFnEXTQq6zik8fACdFG2QM2vONCcs1iMZA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=qABTjMuQH3UDy+TBLjd0+QDYxkWgpJwmaVamUbwXQdc=; b=QB99RsXmePD/oUzkU3U5npqdHDItBv3UbrtZDOBHaIH7bp+b8VBs/8Oa6yLGjWiT1hpCi46iic0K9ZBRSHWX0K9dMmw9r/UhlZpYcYTySNStLVdxx2Cwnhb1kZJnAIou7Ow/BshMIbB4e9YCx0AmDssP58OKnMXnxIFQoDMVc7MEaZvKCARhVsFbZ/K5v4kf0aewA4I1Ijd1pEC3/+FvUYHbEVCJOcJ3tOScdQdw+/sQ+3QmaoY4Q+J6fatm43/7b6bhNlQjUXz0FVpdTbM5YCpwHtEuakDV1Kx/8gWLahkMpVbI4iox7G9zd6HcOVtOHS2Yui7wJfihPIiV422KZA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=datatrails.ai; dmarc=pass action=none header.from=datatrails.ai; dkim=pass header.d=datatrails.ai; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=datatrails.ai; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=qABTjMuQH3UDy+TBLjd0+QDYxkWgpJwmaVamUbwXQdc=; b=EX6UOUUaio61p4jBBjSrkLwTmrON5yHaAiMyOioob9Esr4ROpFV1Goze90LV1UCaZh1WJa35Wt1PbqshxHpQHnc2uqQ2aSrP2ygEclmEIufzinKohGZe34UxOdOhyZXkGe6GVGtui12UKMrkwDE6WQ6Fz5r0By0BfLJaDVfP93eMLTthDIn7cg6W8g/uJKorrw5SUgvdWXy/xCS17BsMw3pn4wacaT42c/D1Jt35h01dnBrU6DztzIBIvG9I5iAUXnlg/VK1EAgVJUd57ySy2OA4p6X5qBCrAyqcWiovpRtEnTEVh2U7c5wx4qsYALkG/722cjyoo0TUzJEN72Uq1w==
Received: from CWXP265MB5766.GBRP265.PROD.OUTLOOK.COM (2603:10a6:400:1a8::6) by LO0P265MB2794.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:149::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9499.6; Sat, 10 Jan 2026 13:00:59 +0000
Received: from CWXP265MB5766.GBRP265.PROD.OUTLOOK.COM ([fe80::5ccc:ba1d:ea70:ab6a]) by CWXP265MB5766.GBRP265.PROD.OUTLOOK.COM ([fe80::5ccc:ba1d:ea70:ab6a%7]) with mapi id 15.20.9499.005; Sat, 10 Jan 2026 13:00:59 +0000
From: Jon Geater <jon.geater@datatrails.ai>
To: "Andrew R. Reiter" <arr@watson.org>, "scitt@ietf.org" <scitt@ietf.org>, Amaury Chamayou <amaury.chamayou@microsoft.com>, Henk Birkholz <henk.birkholz@ietf.contact>
Thread-Topic: [SCITT] async completion 2.1.4 question
Thread-Index: AQHcgZu5FiKH+AXcdkGuoibrJZWO7LVLXciO
Date: Sat, 10 Jan 2026 13:00:59 +0000
Message-ID: <CWXP265MB57662217354011A79BD65E879883A@CWXP265MB5766.GBRP265.PROD.OUTLOOK.COM>
References: <64d7b394-799c-80ef-da5f-92b0307561bb@watson.org>
In-Reply-To: <64d7b394-799c-80ef-da5f-92b0307561bb@watson.org>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-Mentions: amaury.chamayou@microsoft.com,henk.birkholz@ietf.contact
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=datatrails.ai;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: CWXP265MB5766:EE_|LO0P265MB2794:EE_
x-ms-office365-filtering-correlation-id: e6a08bd5-07a9-44ef-6eab-08de50484d23
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|376014|366016|1800799024|4022899009|8096899003|7053199007|38070700021;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CWXP265MB5766.GBRP265.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(1800799024)(4022899009)(8096899003)(7053199007)(38070700021);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_CWXP265MB57662217354011A79BD65E879883ACWXP265MB5766GBRP_"
MIME-Version: 1.0
X-OriginatorOrg: datatrails.ai
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CWXP265MB5766.GBRP265.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: e6a08bd5-07a9-44ef-6eab-08de50484d23
X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Jan 2026 13:00:59.5014 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: e6cd7cbd-4331-4942-b28d-a327d99a088a
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: k2zypJ2F8xl2fM2lTQTyIbkOlhTGUWeXs27sovWoL4AZaYHLjM8WOb6CjGNcHHuyfHFfq2vz/agc5AGJkLNXXFHd3/egxzXQSFV6tLN8qRI=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO0P265MB2794
Message-ID-Hash: 3CCVC6RAYYMUG2G677VHYFIRLDQ5C4EI
X-Message-ID-Hash: 3CCVC6RAYYMUG2G677VHYFIRLDQ5C4EI
X-MailFrom: jon.geater@datatrails.ai
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [SCITT] Re: async completion 2.1.4 question
List-Id: "Supply Chain Integrity, Transparency, and Trust" <scitt.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/scitt/RHQInt1v2HL6isBE0qeVTzCLixY>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scitt>
List-Help: <mailto:scitt-request@ietf.org?subject=help>
List-Owner: <mailto:scitt-owner@ietf.org>
List-Post: <mailto:scitt@ietf.org>
List-Subscribe: <mailto:scitt-join@ietf.org>
List-Unsubscribe: <mailto:scitt-leave@ietf.org>

<chair hat off, document editor hat on>

Ah yes, we had a big sweep on this a while ago to sort out the several inconsistencies we had on Receipt vs Transparent Statement (and where exactly they should be formed) and this must have slipped through.

My belief (based on  having actually written one and thinking about separation of concerns between ‘core SCITT’ and ‘adjacent services')  is that indeed the endpoint should only return the Receipt. If the TS actually has a copy of the Statement stashed as well (which the DataTrails implementation does, but I think maybe the Microsoft one doesn’t?) then great, another endpoint could conveniently glue them together for you. But it shouldn’t be forced to.

I think @Amaury Chamayou<mailto:amaury.chamayou@microsoft.com> / @Henk Birkholz<mailto:henk.birkholz@ietf.contact> this probably qualifies for an Issue and the example should be changed. Agree?

Jon

On 09/01/2026, 20:11, "Andrew R. Reiter" <arr@watson.org> wrote:

Hello,

Apologies if this email contains question that is an obvious mistake by
me:


I am implementing SCRAPI 06 and noticed a possible ambiguity in section
2.1.4.2. The normative text says the 200 response to GET /entries/{id}
"contains the  Receipt", and the example body is a receipt COSE_Sign1
signed by the TS. However, the illustrative
async flow immediately below says the final 200 response is a "Transparent
Statement". These are different artifacts: a receipt is TS signed proof
only, while a transparent statement is the issuer signed statement with
receipts attached.

I think the intended response is a receipt, given the 2.1.4.2 text and the
receipt-shaped example body, but I would appreciate clarification. If it
is a receipt, updating the flow line to "200 (Receipt)" would make it
consistent. If it is a transparent statement, the 2.1.4.2 text and example
body should be updated accordingly, and it would help to explain where the
receipt is retrieved.

Again... apologies if I am being obtuse :)

Best,
Andrew Reiter

--
arr@watson.org                           Victoria concordia crescit

--
SCITT mailing list -- scitt@ietf.org
To unsubscribe send an email to scitt-leave@ietf.org