Add strict canonical asset descriptor decoding

2 files changed, 8 insertions, 0 deletions

diff --git a/docs/MONZERO_ASSETS_V1_SPEC.md b/docs/MONZERO_ASSETS_V1_SPEC.md
index 0da86ae83..d41dc9b7c 100644
--- a/docs/MONZERO_ASSETS_V1_SPEC.md
+++ b/docs/MONZERO_ASSETS_V1_SPEC.md
@@ -128,6 +128,13 @@ on-chain issuance, whether it can rotate, and how it is permanently closed.
 Until that complete path exists, wallets must not display a collection as
 verified.
 
+The prototype now includes a strict decoder for this canonical descriptor. It
+rejects truncated inputs at every byte boundary, unknown network UUIDs,
+unsupported versions and classes, oversized references, embedded NUL bytes,
+trailing bytes, mismatched lengths, and any encoding that does not reproduce
+the canonical byte sequence exactly. This parser is still not connected to
+transaction or block deserialization.
+
 ### 4.2 Inactive registry and reorganisation model
 
 The prototype includes an in-memory reference registry, disconnected from the
diff --git a/docs/MONZERO_PHASE0_STABILIZATION.md b/docs/MONZERO_PHASE0_STABILIZATION.md
index 2a42c8ca6..3ebf09d99 100644
--- a/docs/MONZERO_PHASE0_STABILIZATION.md
+++ b/docs/MONZERO_PHASE0_STABILIZATION.md
@@ -127,6 +127,7 @@ isolated disposable development network may be used after cryptographic review.
 - [x] Domain-separated issuer authorization signatures.
 - [x] Domain-separated collection-membership authorization signatures.
 - [x] Inactive authenticated issuance registry with deterministic reorg rollback.
+- [x] Strict canonical issuance-descriptor decoder with byte-boundary truncation tests.
 - [x] External cryptographic-review brief and mandatory threat cases.
 - [ ] Reviewed confidential per-asset commitment and range-proof construction.
 - [ ] Versioned asset transaction serialization with strict parser limits.