AlgoVoi Substrate Guard (lite)
Copyright 2026 AlgoVoi (chopmob@gmail.com)

Licensed under the Apache License, Version 2.0.
You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0

This package is an adopter of the AlgoVoi substrate. It is a deterministic input-bounds
gate that runs BEFORE canonicalization: a well-formed but resource-hostile payload (too
large, too deeply nested, too many keys, oversized strings/arrays, unsafe numbers) is
rejected with a named code, before any RFC 8785 JCS + SHA-256 work touches it. The limits
in force are content-addressed (profile_ref = "sha256:" + SHA-256(JCS(profile))) so a record
can prove which bounds admitted it. The canonicalisation base is imported by hash and is not
modified; this gate changes no hash and adds no crypto primitive.

This is the LITE (open, structural) tier. Runtime defences (rate limiting, replay windows)
are not part of this package; they live in the commercial AlgoVoi verifier layer and are
never claimed as a substrate property.

Canonical conformance vectors: conformance/substrate_guard_v1/vectors.json. The default
profile guard-receipt-v1 addresses to
sha256:a4791b13c67a16109b85ef67fc65700ea902b6ad40dad44d8556632c3d5524a6.

If you build on this package, preserve this NOTICE file in your distribution and pin the
version (algovoi-substrate-guard==0.1.0). To receive a free v0 licence key for
algovoi-mandate-auditor, contact chopmob@gmail.com with your project's import-by-hash
evidence and a copy of this NOTICE.
