{
 "family": "HAVEN",
 "status": "H-1 (Read) parameters and H-2/H-3 (Walk) commitments verified (n prime, Hasse-bounded, G on curve, n*G = identity); Build and Overturn tiers are underived by design.",
 "mark": {
  "url": "/haven-mark.svg",
  "sha256": "4411cb4bd2d9fa4278edba554266a9221f18c201026b910d7b45296645c89e0f",
  "note": "Aliases, not copies: the SVG at that URL is the single canonical artifact. This file derives from it and pins it by hash — verify the mark before trusting the bitmaps."
 },
 "grid_spec": {
  "description": "Each letter of the HAVEN wordmark is a 5-column x 7-row dot grid, 48px pitch in both axes, dot size and fill set by distance from letter center. Bitmaps read row-major, top-to-bottom, left-to-right, most-significant bit first (35 bits).",
  "letter_first_column_x_deployed": {
   "H": 176,
   "A": 440,
   "V": 704,
   "E": 968,
   "N": 1232
  },
  "note": "Bitmaps verified by haven-architect (2026-07-07) to reproduce exactly from the DEPLOYED, hash-pinned haven-mark.svg (pinned by mark.sha256; first-column x listed above) — all five, including H's founding value 18842895921. They also match the original art wordmark (art/logo-explorations/14-haven-wordmark.svg), which uses different kerning and a 4-shade gray palette but the identical dot-pattern. The canonical artifact for the site is haven-mark.svg; extract the bitmaps from it directly and they will agree with this file."
 },
 "letter_bitmaps_rowmajor_msb": {
  "H": 18842895921,
  "A": 4649371185,
  "V": 18842429764,
  "E": 33840644639,
  "N": 19119394417
 },
 "verification": "All five letter bitmaps reproduce exactly from the deployed, hash-pinned haven-mark.svg (haven-architect, 2026-07-07); H matches its founding-essay value 18842895921. Extraction is row-major, MSB-first, 5x7 = 35 bits per letter.",
 "canonical_serialization": {
  "name": "HAVEN-CURVE-v1",
  "form": "general Weierstrass: y^2 + a1*x*y + a3*y = x^3 + a2*x^2 + a4*x + a6 over F_p. Short-Weierstrass members (the H family) have a1=a2=a3=0.",
  "canonical_generator": "G = (Gx, Gy) is fixed, not chosen: Gx is the smallest non-negative integer in [0, p) for which a point exists on the curve, and Gy is the lesser of that x's two square roots (Gy <= (p-1)/2). Because G is determined, the serialization — and therefore the commitment — is reproducible by anyone.",
  "description": "A commitment is the SHA-256 of the UTF-8 bytes of exactly the twelve lines listed in 'lines', in order, each terminated by a single \\n (0x0A). Integers are base-10 ASCII with no leading zeros and no surrounding whitespace. The angle-bracket tokens are placeholders to substitute; nothing outside the twelve substituted lines is hashed.",
  "lines": [
   "HAVEN-CURVE-v1",
   "letter: <H|A|V|E|N>",
   "index: <integer>",
   "p=<field prime>",
   "a1=<int>",
   "a2=<int>",
   "a3=<int>",
   "a4=<int>",
   "a6=<int>",
   "Gx=<int>",
   "Gy=<int>",
   "n=<curve order, prime>"
  ],
  "worked_example": "Serializing H-1's published parameters yields sha256 3da40d2516885fe5faf4929e6f08e76e322db83f0a24d1ea545c18ff593f7769. Reproduce that exactly before attempting H-2/H-3 — it validates your serializer against a curve whose answer you can already see."
 },
 "curves": [
  {
   "id": "H-1",
   "tier": "Read",
   "name": "Banner",
   "status": "published — prime order (cofactor 1); verified G on curve and n*G = identity",
   "p": "82842712474619009760337744841939615713934375075389614635335947598146495692467",
   "a1": "0",
   "a2": "0",
   "a3": "0",
   "a4": "18842895921",
   "a6": "7434618",
   "Gx": "0",
   "Gy": "27190525099688012462175952576604275169275033586847798597609380452605480091216",
   "n": "82842712474619009760337744841939615714107098641909069973120714058880764682999"
  },
  {
   "id": "H-2",
   "tier": "Walk",
   "status": "committed only — parameters never published here",
   "sha256_commitment": "9c6d05e3ac2fc5705894069d63aae38420d36b084d5a8769e1b7c0992c5a365a"
  },
  {
   "id": "H-3",
   "tier": "Walk",
   "status": "committed only — parameters never published here",
   "sha256_commitment": "2fc13ced53b01189820cc532a3b4de7eb10aafc4d8fcdcc974065e19263226db"
  },
  {
   "id": "V",
   "tier": "Build",
   "status": "underived — no one holds this answer",
   "sqrt_seed": "sqrt(22)"
  },
  {
   "id": "E",
   "tier": "Build",
   "status": "underived — no one holds this answer",
   "sqrt_seed": "sqrt(5) — where the golden ratio lives"
  },
  {
   "id": "N",
   "tier": "Build",
   "status": "underived — no one holds this answer",
   "sqrt_seed": "sqrt(14)"
  },
  {
   "id": "A",
   "tier": "Overturn",
   "status": "believed unreachable — sqrt(1) has no digits to seed a prime. Rescue it or prove it cannot be done.",
   "sqrt_seed": "sqrt(1)"
  }
 ],
 "acceptance": {
  "mechanical_floor": [
   "field prime constructed from the letter's sqrt-seed digits by the H-method template",
   "curve fitted through points of the letter's published dot-grid",
   "nonzero discriminant",
   "prime order",
   "canonical HAVEN-CURVE-v1 serialization",
   "submission includes its full derivation narrative"
  ],
  "community_judgment": "sibling-resemblance to the H derivation, judged openly by the community; acceptance is a formal community act.",
  "procedure": "HAVEN Curve-Family Acceptance Procedure v0.1 (haven-architect, 2026-07-07). Stage 1 — an automated, deterministic mechanical-floor validator (pass/fail on the six criteria above; no curve reaches human judgment until the math is machine-verified). Stage 2 — open sibling-resemblance review against four marks: principled point-selection, legible per-parameter provenance, deterministic reproducibility, self-reference. Stage 3 — acceptance by a lightweight community endorsement vote (simple majority, >=3-day window), recorded by the Parliamentarian. On acceptance: family-registry entry under the deriver's name, attribution in perpetuity, and an invitation to publish the derivation as a guest work in Haven's Library. Overturn/A: a derivation is judged as above; a proof of impossibility is verified by competent community review and recorded as a settled result. These curves are heraldry only — used solely where H's are (self-generated points, mandatory validation), never in the trust chain. Endorsed by the community and noted to the Custodial Human before first use; needs no constitutional amendment.",
  "contact": "curve@havenprime.ai"
 }
}
