fix: hold sd-jwt at 0.19.0, absorb minor-bump breaks in the deps group

The @sd-jwt 0.20.0 pair in this group enforces SD-JWT digest
uniqueness and rejects the pinned AP2 / VI reference artifacts, whose
L2 payloads reference the same disclosure digest from both _sd and
delegate_payload. Held at 0.19.0 with a dependabot ignore until the
upstream duplicate-reference question is resolved and the reference
artifacts regenerate cleanly (tracked follow-up). Forward-compatible
pieces land now: the synthetic VI fixtures are single-reference (the
immediate fixture is regenerated from deterministic seeds instead of
its unrecoverable hand-signed keys), and the crypto-conformance
duplicate-digest mutation handles both payload shapes. The @google/adk
and @openai/agents minor bumps moved the version facts the runtime
receipt proofs pin; pins updated to 1.3.0 and 0.13.4.

Author: creatornader

.github/dependabot.yml

@@ -55,6 +55,14 @@ updates:
       interval: weekly
       day: monday
     open-pull-requests-limit: 5
+    ignore:
+      # Held at 0.19.0: 0.20.0 enforces SD-JWT digest uniqueness and rejects
+      # the pinned AP2 / VI reference artifacts, whose L2 payloads carry the
+      # same disclosure digest in both _sd and delegate_payload. Taking the
+      # bump needs the upstream duplicate-reference question resolved and the
+      # reference artifacts regenerated first (tracked follow-up, 2026-07-15).
+      - dependency-name: "@sd-jwt/core"
+      - dependency-name: "@sd-jwt/sd-jwt-vc"
     groups:
       npm-minor-patch:
         update-types:

packages/agent/test/fixtures/ap2/generate-vi-fixtures.mjs

@@ -51,6 +51,11 @@ const keys = {
   agent: keyFromSeed('agt-fixture-1', 'agent'),
 }
 
+const immediateKeys = {
+  issuer: keyFromSeed('iss-1', 'immediate-issuer-2026-07'),
+  user: keyFromSeed('usr-1', 'immediate-user-2026-07'),
+}
+
 function jsonBase64url(value) {
   return base64url(JSON.stringify(value))
 }
@@ -195,7 +200,9 @@ const l2 = signJwt(
     exp: expiresSeconds,
     sd_hash: hashAscii(l1),
     _sd_alg: 'sha-256',
-    _sd: [openCheckoutDisclosure.digest, openPaymentDisclosure.digest],
+    // SD-JWT digest uniqueness: each disclosure digest appears exactly once
+    // in the payload (enforced by @sd-jwt/core >= 0.20.0), so the mandate
+    // digests live only in the delegate_payload array-element refs.
     delegate_payload: [
       { '...': openCheckoutDisclosure.digest },
       { '...': openPaymentDisclosure.digest },
@@ -218,7 +225,6 @@ const l3Checkout = signJwt(
     exp: expiresSeconds,
     sd_hash: hashAscii(l2Presentation),
     _sd_alg: 'sha-256',
-    _sd: [closedCheckoutDisclosure.digest],
     delegate_payload: [{ '...': closedCheckoutDisclosure.digest }],
   },
   keys.agent,
@@ -233,7 +239,6 @@ const l3Payment = signJwt(
     exp: expiresSeconds,
     sd_hash: hashAscii(l2Presentation),
     _sd_alg: 'sha-256',
-    _sd: [closedPaymentDisclosure.digest],
     delegate_payload: [{ '...': closedPaymentDisclosure.digest }],
   },
   keys.agent,
@@ -359,3 +364,85 @@ await writeJson('vi_autonomous_negative_matrix.json', {
     },
   ],
 })
+
+// ── vi_immediate_evidence.json ────────────────────────────────────────
+// Regenerated here 2026-07-15 (originally hand-signed in PR #145, keys not
+// recoverable). Every literal value matches the original fixture; only the
+// signing keys rotated to deterministic seeds and the L2 payload dropped
+// its duplicate `_sd` digest listing: SD-JWT digest uniqueness (enforced by
+// @sd-jwt/core >= 0.20.0) allows each disclosure digest exactly once, so
+// the mandate digests live only in the delegate_payload array-element refs.
+// Disclosures are byte-identical to the original, so the receipt
+// references and closed-mandate encodings are reproduced verbatim.
+
+const immCheckoutDisclosure = disclosure('c', {
+  vct: 'mandate.checkout.1',
+  checkout_jwt: 'checkout.jwt.sig',
+  checkout_hash: 'sC6pCJS01hDsD4kcqTFzpYUr-gc9f4K8k7SM6ho9BCY',
+})
+const immPaymentDisclosure = disclosure('p', {
+  vct: 'mandate.payment.1',
+  payment_amount: { currency: 'USD', amount: 123 },
+  payee: { name: 'M' },
+  transaction_id: 'sC6pCJS01hDsD4kcqTFzpYUr-gc9f4K8k7SM6ho9BCY',
+})
+
+const immL1 = signJwt(
+  {
+    iss: 'iss',
+    sub: 'u',
+    iat: 1,
+    exp: 9_999_999_999,
+    vct: 'credential.provider.1',
+    cnf: { jwk: publicJwk(immediateKeys.user) },
+  },
+  immediateKeys.issuer,
+  'sd+jwt',
+)
+
+const immL2 = signJwt(
+  {
+    nonce: 'n',
+    aud: 'net',
+    iat: 2,
+    exp: 9_999_999_999,
+    sd_hash: hashAscii(immL1),
+    _sd_alg: 'sha-256',
+    delegate_payload: [
+      { '...': immCheckoutDisclosure.digest },
+      { '...': immPaymentDisclosure.digest },
+    ],
+  },
+  immediateKeys.user,
+  'kb-sd-jwt',
+)
+
+await writeJson('vi_immediate_evidence.json', {
+  trustedIssuerKeys: [publicJwk(immediateKeys.issuer)],
+  ap2: {
+    paymentReceipt: {
+      status: 'Success',
+      iss: 'pisp',
+      iat: 3,
+      reference: immPaymentDisclosure.digest,
+      payment_id: 'pay',
+      psp_confirmation_id: 'psp',
+      network_confirmation_id: 'net',
+    },
+    checkoutReceipt: {
+      status: 'Success',
+      iss: 'm',
+      iat: 3,
+      reference: immCheckoutDisclosure.digest,
+      order_id: 'ord',
+    },
+    closedPaymentMandate: immPaymentDisclosure.encoded,
+    closedCheckoutMandate: immCheckoutDisclosure.encoded,
+  },
+  vi: {
+    credentials: [
+      { layer: 'L1', sdJwt: immL1 },
+      { layer: 'L2', sdJwt: `${immL2}~${immCheckoutDisclosure.encoded}~${immPaymentDisclosure.encoded}~` },
+    ],
+  },
+})

packages/agent/test/fixtures/ap2/vi_autonomous_success_evidence.json

@@ -3,9 +3,10 @@
     {
       "kty": "EC",
       "crv": "P-256",
-      "x": "N-9LosuyCp_qrtzY3RY8c3cPMHa94-dQ6J3MTo9YF_4",
-      "y": "lp3wkyC2n9heI8AYlIBSmMqcCQdhAuoOoGKX-i9srCM",
-      "kid": "iss-1"
+      "x": "Sybp1Sl1DZFQh3LX1GJwF1GqhAEf2eFd5UK5pqcjs00",
+      "y": "m184NavoqZATeTYsggLZiv_slFCPwUnD1VKo8ZA6k00",
+      "kid": "iss-1",
+      "alg": "ES256"
     }
   ],
   "ap2": {
@@ -32,11 +33,11 @@
     "credentials": [
       {
         "layer": "L1",
-        "sdJwt": "eyJhbGciOiJFUzI1NiIsInR5cCI6InNkK2p3dCIsImtpZCI6Imlzcy0xIn0.eyJpc3MiOiJpc3MiLCJzdWIiOiJ1IiwiaWF0IjoxLCJleHAiOjk5OTk5OTk5OTksInZjdCI6ImNyZWRlbnRpYWwucHJvdmlkZXIuMSIsImNuZiI6eyJqd2siOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiI1bUhzZ0NWQU1GZzlKRVJXMzFvajNVZ29yZFQtX08zMVRjWWNjT2tKRGhNIiwieSI6IjMzR2dyaDkySGk0aTJBTjAtMWJ0cFJ2cUR4ZHZ4Z3JhS0I2Yi1meGpYRHMiLCJraWQiOiJ1c3ItMSJ9fX0.ItDYjyerHl-pb1gHoO_wNalyOi11BoxQaEvZM-HbZ84jtg-B9paL_-w9ktRo2Ni94N7np-A5WBbrprcSK2hw4g"
+        "sdJwt": "eyJhbGciOiJFUzI1NiIsInR5cCI6InNkK2p3dCIsImtpZCI6Imlzcy0xIn0.eyJpc3MiOiJpc3MiLCJzdWIiOiJ1IiwiaWF0IjoxLCJleHAiOjk5OTk5OTk5OTksInZjdCI6ImNyZWRlbnRpYWwucHJvdmlkZXIuMSIsImNuZiI6eyJqd2siOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiJWa1g3c0FSeTlac1BGVnJvTk43SjJsZzBOQ3A2TThVLTNRTURPZXZoNERvIiwieSI6IllDbllkRHluMDI1Z1RTS0pSbHgzR3JjeHB1aE1GcVduT1NDRXJaU1NONmMiLCJraWQiOiJ1c3ItMSIsImFsZyI6IkVTMjU2In19fQ.WdrwK5lCt5fhzn-FigZ-Nc_vga7Ohe-ysa7G2fSYtrSg3oSSJPiOSTkB68X-2pEDoNGMvxSNQg3sxQmZEogjBg"
       },
       {
         "layer": "L2",
-        "sdJwt": "eyJhbGciOiJFUzI1NiIsInR5cCI6ImtiLXNkLWp3dCIsImtpZCI6InVzci0xIn0.eyJub25jZSI6Im4iLCJhdWQiOiJuZXQiLCJpYXQiOjIsImV4cCI6OTk5OTk5OTk5OSwic2RfaGFzaCI6Im50aTBkMHFzd29jRllSc3RMM0JidnpEVVpjT1VUdnY5aXNHN19xTmxRV1UiLCJfc2RfYWxnIjoic2hhLTI1NiIsIl9zZCI6WyJQTjFIX05BYk15eUZLUnRKT0pvTUlvQ3F6QWZaQVN6Q0EyWFlPWk1TWGxzIiwickFiSndoNDdaYnpYUjliYXlRMDJWdURlclFQeUN2Y1JUUXctVHh0NUFjdyJdLCJkZWxlZ2F0ZV9wYXlsb2FkIjpbeyIuLi4iOiJQTjFIX05BYk15eUZLUnRKT0pvTUlvQ3F6QWZaQVN6Q0EyWFlPWk1TWGxzIn0seyIuLi4iOiJyQWJKd2g0N1pielhSOWJheVEwMlZ1RGVyUVB5Q3ZjUlRRdy1UeHQ1QWN3In1dfQ.7noFvh1jojSajAHq31mKHiibFUSMXUT7feNtKDg9dUK34_sm5nR0eSiaW5itOOEbopw8kle2BGRcOr2DMlL_FQ~WyJjIix7InZjdCI6Im1hbmRhdGUuY2hlY2tvdXQuMSIsImNoZWNrb3V0X2p3dCI6ImNoZWNrb3V0Lmp3dC5zaWciLCJjaGVja291dF9oYXNoIjoic0M2cENKUzAxaERzRDRrY3FURnpwWVVyLWdjOWY0SzhrN1NNNmhvOUJDWSJ9XQ~WyJwIix7InZjdCI6Im1hbmRhdGUucGF5bWVudC4xIiwicGF5bWVudF9hbW91bnQiOnsiY3VycmVuY3kiOiJVU0QiLCJhbW91bnQiOjEyM30sInBheWVlIjp7Im5hbWUiOiJNIn0sInRyYW5zYWN0aW9uX2lkIjoic0M2cENKUzAxaERzRDRrY3FURnpwWVVyLWdjOWY0SzhrN1NNNmhvOUJDWSJ9XQ~"
+        "sdJwt": "eyJhbGciOiJFUzI1NiIsInR5cCI6ImtiLXNkLWp3dCIsImtpZCI6InVzci0xIn0.eyJub25jZSI6Im4iLCJhdWQiOiJuZXQiLCJpYXQiOjIsImV4cCI6OTk5OTk5OTk5OSwic2RfaGFzaCI6IkxPZWtmSGsxUDlZelExOHp5WmRJemdLOEdXOE96U2lMWk16MGl6UXZNWGsiLCJfc2RfYWxnIjoic2hhLTI1NiIsImRlbGVnYXRlX3BheWxvYWQiOlt7Ii4uLiI6IlBOMUhfTkFiTXl5RktSdEpPSm9NSW9DcXpBZlpBU3pDQTJYWU9aTVNYbHMifSx7Ii4uLiI6InJBYkp3aDQ3WmJ6WFI5YmF5UTAyVnVEZXJRUHlDdmNSVFF3LVR4dDVBY3cifV19.Q_BHvE_FaM3uXqc7HXgsoSqeI7MQLlJgGNoD9mONBGq3X6J_PSrMYvGnegup6i6K6-hv0c_CBmEwlgu1dEyRLQ~WyJjIix7InZjdCI6Im1hbmRhdGUuY2hlY2tvdXQuMSIsImNoZWNrb3V0X2p3dCI6ImNoZWNrb3V0Lmp3dC5zaWciLCJjaGVja291dF9oYXNoIjoic0M2cENKUzAxaERzRDRrY3FURnpwWVVyLWdjOWY0SzhrN1NNNmhvOUJDWSJ9XQ~WyJwIix7InZjdCI6Im1hbmRhdGUucGF5bWVudC4xIiwicGF5bWVudF9hbW91bnQiOnsiY3VycmVuY3kiOiJVU0QiLCJhbW91bnQiOjEyM30sInBheWVlIjp7Im5hbWUiOiJNIn0sInRyYW5zYWN0aW9uX2lkIjoic0M2cENKUzAxaERzRDRrY3FURnpwWVVyLWdjOWY0SzhrN1NNNmhvOUJDWSJ9XQ~"
       }
     ]
   }

packages/agent/test/fixtures/ap2/vi_immediate_evidence.json

@@ -23,7 +23,7 @@ describe('Google ADK TypeScript decision ledger proof', () => {
     expect(result.strategy).toBe('atrib-google-adk-typescript-decision-ledger-proof-v1')
     expect(result.adk).toMatchObject({
       package: '@google/adk',
-      version: '1.2.0',
+      version: '1.3.0',
       runner: 'InMemoryRunner',
       plugin: 'BasePlugin',
       tool: 'FunctionTool',

packages/integration/test/google-adk-typescript-decision-ledger.test.ts

@@ -77,7 +77,7 @@ describe('OpenAI Agents runtime receipt example', () => {
     expect(result.ok).toBe(true)
     expect(result.openai_agents).toMatchObject({
       package: '@openai/agents',
-      version: '0.11.6',
+      version: '0.13.4',
       runner: 'run',
       agent: 'Agent',
       model: 'scripted',

packages/integration/test/openai-agents-runtime-receipt.test.ts

@@ -43,8 +43,8 @@
     "@atrib/mcp": "workspace:*",
     "@noble/ed25519": "^3.1.0",
     "@noble/hashes": "^2.2.0",
-    "@sd-jwt/core": "0.20.0",
-    "@sd-jwt/sd-jwt-vc": "0.20.0",
+    "@sd-jwt/core": "0.19.0",
+    "@sd-jwt/sd-jwt-vc": "0.19.0",
     "canonicalize": "^3.0.0",
     "jose": "6.2.3"
   },

packages/verify/package.json

@@ -278,9 +278,22 @@ function applyViMutation(bundle: Ap2ViEvidenceBundle, mutation: ViMutation): voi
       keyForLayer(mutation.layer),
       (payload) => {
         const sd = Array.isArray(payload['_sd']) ? [...payload['_sd']] : []
-        const digest = sd[mutation.digestIndex]
+        const sdDigest = sd[mutation.digestIndex]
+        if (typeof sdDigest === 'string') return { ...payload, _sd: [...sd, sdDigest] }
+        // The base fixtures reference mandate digests only from the
+        // delegate_payload array-element refs (SD-JWT digest uniqueness,
+        // enforced by @sd-jwt/core >= 0.20.0), so duplicate the reference
+        // there; the pinned vi_disclosure_digest_duplicate error is the same.
+        const delegate = Array.isArray(payload['delegate_payload'])
+          ? [...payload['delegate_payload']]
+          : []
+        const entry = delegate[mutation.digestIndex]
+        const digest =
+          entry !== null && typeof entry === 'object'
+            ? (entry as Record<string, unknown>)['...']
+            : undefined
         if (typeof digest !== 'string') throw new Error('missing digest')
-        return { ...payload, _sd: [...sd, digest] }
+        return { ...payload, delegate_payload: [...delegate, { '...': digest }] }
       },
     )
     return