From 6f4d91f80d4352e0886992c818b3cb950b1d0a63 Mon Sep 17 00:00:00 2001 From: manumishra12 Date: Sat, 11 Jul 2026 14:29:15 -0700 Subject: [PATCH] okf: add optional erasure conformance profile (SPEC 9.1) Plain deletion of a concept can still disclose that it existed (dangling inbound links, index/log references, recoverable git history). Adds an opt-in erasure profile specifying what erased means for bundles that must not leak removed knowledge. The profile is opt-in and does not change the validity of ordinary bundles. Additive and backward-compatible (per SPEC 11). Addresses #90. --- okf/SPEC.md | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/okf/SPEC.md b/okf/SPEC.md index 55d0a46..d905f63 100644 --- a/okf/SPEC.md +++ b/okf/SPEC.md @@ -361,6 +361,26 @@ This permissive consumption model is intentional: OKF is meant to remain useful as bundles grow, get refactored, and are partially generated by agents. +### 9.1 Erasure profile (optional) + +Deleting a concept file removes its content, but a plain deletion can still +*disclose* that the concept once existed: dangling links from other concepts +continue to name it, `index.md` and `log.md` may still reference it, and in a +git-distributed bundle the content remains recoverable from history. Bundles +that must not leak erased knowledge MAY declare conformance with the **erasure +profile**, which requires that, when a concept is erased: + +1. Inbound links to it from other concepts in the same revision are removed or + redacted, so no dangling reference names the erased concept. +2. Its concept ID no longer appears in any `index.md` or `log.md`. +3. Where the distribution history itself must not disclose the concept, the + erasure is realized by rewriting history (for example, a fresh export) + rather than an additive deletion commit. + +The erasure profile is opt-in. Consumers MUST NOT assume a bundle follows it +unless the bundle states so, and MUST NOT treat a non-conforming bundle as +malformed — ordinary bundles remain valid under the rules above. + --- ## 10. Relationship to other formats