SHP Specification
SHP-CTA-2.2
SHP Certification Trust Architecture v2.2
SHP Certification Trust Architecture v2.2
The Certification Trust Architecture defines the SHP trust, issuance and certification-authority architecture.
Version 2.2 is Active from 26 September 2026 and supersedes CTA v2.1.
Version 2.2 is a Minor amendment reconciling the specification’s authority metadata with the canonical SHP authority vocabulary. It does not change certification or trust semantics.
The architecture preserves hierarchical SHP signing authority: the root does not directly sign certification manifests, and production issuance remains subject to governed qualification and key-authority requirements.
Activation of CTA does not itself establish platform support, production signing readiness, certification-service availability or signing authority for any implementation, platform, operator or key.
The normative publication artefact is the immutable ODT linked above. The SHA-256 digest published with this page identifies its exact bytes.
Repository provenance
The repository object identified below is byte-identical to the normative publication artefact. Its SHA-256 digest matches the publication digest shown above.
View commit-bound repository object · View repository commit
Repository location and commit history provide provenance and traceability. They do not determine SHP normative authority, lifecycle status, platform support, or certification eligibility.