OREP 3 snapshots

OREP (Open Research Exchange Protocol) is implemented by HypoArk. The current protocol version is 3, formerly CAP 3. This name change preserves the existing format: cap.* identifiers, cap.json, cap: references, and the .cap extension remain unchanged. Existing repositories, record IDs, snapshots, and signatures remain valid. A .cap package uses POSIX ustar and gzip. Its snapshot ID is the SHA-256 of the original cap.json bytes, not of a reserialized JSON object or the whole archive.

Signatures use Ed25519 over the 32 raw bytes of the signed hash. Public key fingerprints are SHA-256 of the 32 raw public key bytes.

Validation checks the manifest, exact record membership, record and object hashes, reference closure including relation endpoints, cross-record constraints, signatures, and canvas placements. Links, devices, extended tar headers, unsafe paths, duplicate paths, and local conversation records are rejected.

The original archive is preserved. Signature validity, account binding, and scientific assessments are shown separately. An unbound key can have a valid signature; uploading does not bind its key to the uploader.