[Levaj2000]

Spec and validator revision requested by the praxis maintainers on praxis-proxy/policy#171: the OCSF audit sink's unmapped keys should not carry the name of an engine it is not. Sequence agreed with terylt: this document first, then the validator, then the rename in praxis, then the praxis pin moves to this commit on main.

Spec (docs/specs/aid-emit-1.md)

• Section 1.1 defines two prefixes. aid.* is the format's own: aid.stream, aid.decision, aid.span, aid.taint.input_labels, aid.content. cmf.* stays for the Common Message Format gap fields and the join key, since CMF is a message format shared across hosts, not a product. It explains why a draft renames pinned strings: the reference emitter's home is now the in-tree praxis port, and praxis 0.5.0 is the first release to ship these records, so no consumer has keyed on cpex.*. cpex.* is retired: emitters must not produce it, verifiers may read it as the aid member of the same name.
• Section 1.2 becomes the member table with the host-prefix rules, replacing the two-vocabulary design. aid.<host>.* remains for hosts that do not speak CMF (the LiteLLM adapter), and the join key is cmf.request.request_id on CMF hosts and aid.request_id elsewhere.
• Section 4 widens the value space to the whole of RFC 8785: keys sort by UTF-16 code units, floats take the ES6 form, integers keep their exact digits and a verifier must parse them exactly (the stream epoch exceeds 2^53). The ASCII-keys-and-integers constraint is withdrawn; the praxis canonicalizer now implements the full RFC.
• Sections 7, 8, 9 use the aid names. Section 12 lists all three vectors (the provenance vector was missing from the list) and says where the aid vectors live. Section 13 records why the 1.x line is kept for a wire-name change.

Validator (scripts/aid_emit1_validator.py)

• Canonicalizes with a full RFC 8785 implementation: UTF-16 key order, ES6 number form with shortest round-trip digits and ties to even, exact integers. A non-finite number is E-JCS-NUMBER. E-JCS-SPACE is gone with the constraint it enforced.
• Reads aid.stream first and warns W-VOCAB-RETIRED when stamps sit under the retired cpex.stream.

Verified

• The three vectors under integrations/cpex-ocsf-audit/ still pass through the new canonicalizer, including both DSSE signatures in the dispatch vector against the demo public key: 0 errors.
• The regenerated praxis decision and provenance vectors with the aid names: 0 errors.
• All 16 RFC 8785 Appendix B number vectors, the section 3.2.3 key-ordering example, and the float-schema and 1e21 cases from the praxis review.
• ruff check and ruff format --check clean; added text is plain ASCII.

Not in this PR

• The crate copy under integrations/cpex-ocsf-audit/ and its praxis-port/ patches still carry the cpex names and the pre-1.2.0 vectors. Section 12 says so; syncing that copy from the praxis tree is a separate change.
• docs/specs/aid-emit-py.md and litellm-aid-emit.md still describe cpex as a selectable vocabulary; they are design drafts and can follow.

🤖 Generated with Claude Code

https://claude.ai/code/session_012BUhZ4ZG5jedf9ku6KuxNp

---

Generated by Claude Code