The sm-* libraries (sm = Stellarminds) are the reference
implementations behind AgentClock — small, dependency-light, in the same family as
sm-arp and sm-resolver. Partition-tolerant renewal is one primitive:
it owns the extension math and the signed wire format, and nothing on either side of it.
The primitive
Extend-only, threshold-attested authority renewal
RenewalRequest / PeerAttestation / RenewalProof / RenewalChain — build, sign, independently evaluate, and verify. Ed25519 + RFC 8785 (JCS) canonicalization, the same construction as sm-arp's did:key identities, so the wire shape cannot drift between a requester and a verifying peer.
What sits on either side
The credential issuer
A WIMSE-issuing service, a SPIFFE/SPIRE server, a physical-AI mission authority, or any equivalent — out of scope for this primitive, which treats the original credential as an opaque hash regardless of who issued it or what domain it governs. sm-renewal wraps what an issuer already issued; it does not replace an issuer.
The mesh transport and peer provisioning
How requests and attestations physically move between peers, and how the peer set itself is provisioned and kept in sync, are the consumer's own stack. sm-renewal assumes an existing authenticated channel and a fixed roster; it introduces neither.
Downstream evidence. A settled RenewalChain is a natural
AgentFacts-referenced evidence artifact of partition-time continuity — the same receipt family
as Attested Actions's
action-evidence records, if a mesh chooses to bind one.