panda-rpki-oss/docs/conformance-matrix.md

v0.1.0 conformance matrix

Behaviour	Standard reference	Implementation	Evidence
TAL syntax and TA public-key binding	RFC 8630 §2	src/validation/from_tal.rs, src/model/ta.rs	parser and synthetic integration tests
TA and issued CA profile/signature/resource checks	RFC 6487 §4	src/validation/, src/model/	profile unit tests and synthetic integration tests
Manifest, manifest file hashes, CRL freshness, and ROA checks	RFC 6486, RFC 6487, RFC 6482	src/validation/, src/model/	RRDP unit tests and self-contained tests/synthetic_docker_e2e.sh
RRDP notification, snapshot, delta/replace/withdraw and fallback	RFC 8182 §§3.4–3.5	src/repository/sync/rrdp.rs, src/repository/sync/repo.rs	snapshot/delta state-restart unit tests and synthetic Docker tests
RRDP direct-reference and redirect origin checks	RFC 9674 §3.2	src/repository/fetch/http.rs, src/repository/sync/rrdp.rs	cross-origin unit tests
Repeated TAL/TA pairing and stable aggregate output	RFC 8630 §2; RFC 6813 data model	src/cli/mod.rs, src/cli/validate.rs, src/runtime/	CLI parser checks; locked multi-TAL E2E
Bounded repository and object workers (default 8 each, shared across TALs)	operational support for the standard validation pipeline	src/scheduler/, src/runtime/	worker-pool unit tests
Resumable RRDP protocol state	RFC 8182 §3.4	src/repository/storage/, src/repository/sync/rrdp.rs	atomic state index and restart delta test
CCR manifest, ROA, ASPA, trust-anchor and router-key states	draft-ietf-sidrops-rpki-ccr-11 §§2–4	src/ccr/	encode/decode tests and integration artifacts
TA Constraints rule normalization and EE resource checks	draft-ietf-sidrops-constraining-rpki-trust-anchors-01 §§3–4	src/ta_constraints.rs, src/validation/	parser/normalization tests; constrained validation E2E
VRP CSV output	RFC 6810 data semantics	src/cli/validate.rs, src/runtime/	self-contained Docker E2E CSV/summary assertions

The worker pool and interval index are implementation mechanisms, not new wire protocols; their tests must also prove deterministic output and unchanged validation decisions. Only the table entries above are in v0.1.0 scope. Adding a new source file or protocol feature requires a new row with a document revision, section, test, and reviewer decision.