Signed Record
The canonical record declares protocol, version, name, forest, fullName, siteUrl, publicKey, optional bundleFingerprint, timestamps, feature declarations, extensions, and an ML-DSA-65 signature.
Forest Endpoints
Forest supports register, update, renew, JSON resolve, profile resolve, search, recent, and export endpoints under /shellnames and /@ paths.
Name Rules
Names normalize to lowercase and use 3-32 characters from a-z, 0-9, underscore, and hyphen. Reserved system names are rejected.
Compatibility
ShellNames are optional extension metadata in public proofs. Unknown optional fields are ignored safely. Unknown required features fail clearly.