Conformance and recognition are different acts

Conformance concerns software. A node is the software a jurisdiction runs at a network endpoint. Running a published test suite and publishing its result decides whether the node answers the specified interfaces with the specified semantics. The question is technical, machine-decidable, and reproducible by anyone who downloads the suite.

Recognition is an act of a sovereign authority. A ministry, registrar or supervisor gives effect under its own law to determinations made under another jurisdiction’s law. The act specifies domains, grades, and conditions. It is legal, discretionary, and revocable.

The protocol assigns these acts to different parties. The body that writes the specification certifies conformance. It cannot grant, withhold, condition or revoke recognition, or admit or exclude a jurisdiction. The competent authorities grant recognition and hold no power over the specification.

Sovereigns refuse to let a private company both write the rules and decide membership. They already accept testable private standards with membership decisions retained by members in conformity assessment, aviation registries, financial-messaging standards and internet numbering. This allocation of powers makes the protocol acceptable to sovereigns. It also lets membership scale because decisions need no central approval and create no central queue.

The protocol certifies software behavior at a network endpoint, on a date, against a published suite. It certifies nothing about an authority, ministry, court or officer.

The four boundaries

Four design invariants preserve the powers a sovereign requires to participate.

• No consensus protocol binds nodes that are not both endpoints of the transaction.
• No append-only log serves as the network’s shared authoritative state. Each node keeps its own log, and only the two endpoints hold a corridor’s record.
• No validator set validates transactions on behalf of nodes that did not produce them.
• No network act creates, modifies or extinguishes a node’s recognition edge without that node’s own signature.

Each jurisdiction validates locally, using proofs exchanged through corridors. Acceptance of a network quorum’s determination about its own registry would delegate that registry to the quorum. Cryptography does not change this allocation of authority.

Two nodes run a bilateral commitment protocol: each endpoint signs its own side, and neither can commit alone. It binds only its parties. The network boundaries above permit such bilateral agreements.

These boundaries leave a construction problem. Accession must create many edges from one act, while each edge still requires its participant’s own signature.

Three objects, before the construction

A listing is the published record of a node’s conformance: its class, the specification version it was tested against, the date, and the evidence. Classes are ordered, and each class carries a ceiling on the grade any participant may assert toward a node holding it.

A grade, per compliance domain, is how far a participant gives effect to another’s determinations: in full, in full but flagged for local review, conditional on a stated fact, or not at all. The companion paper Mutual Recognition develops the vocabulary and the composition rules.

A corridor is a directed channel between two participants over which compliance state travels, carrying its own grades per domain.

The standing recognition instruction

Each participant installs a local policy object, a standing recognition instruction, in its own node. This instruction determines which recognition edges the node signs.

The instruction states four requirements in the participant’s own words: a ceiling recognition grade per compliance domain, a minimum counterparty conformance class, a specification-version floor, and an exclusion set. The node applies them to every jurisdiction listed in force in the register. The jurisdiction must be outside the exclusion set and hold a current listing at or above the required class and specification version. For each qualifying jurisdiction, the node emits a locally signed recognition edge. Its grade is the lesser of the participant’s ceiling and the ceiling carried by the counterparty’s certified conformance class.

The certified class fixes the highest grade any participant may assert toward a node. Each participant chooses its own grade within that cap. A node refuses an inbound corridor instrument that asserts a grade above its class. The cap derives mechanically from a tested class. A participant therefore cannot raise the grade at which others recognize it through its own declaration.

The instruction has five properties.

The participant creates the edge under its own signature, node and policy. No network act creates it, preserving the signature boundary above.

The register supplies evidence to local policy and holds no authority over it. A participant that stops trusting the register narrows or revokes its instruction and loses nothing else. Its existing edges remain in its own authority registry under its own signature.

One deposited instrument produces edges with every participant whose instruction admits it. The number of edges equals the number of admitting participants, with zero negotiations. This is the accession construction, implemented without a central actor.

Recognition under an instruction is reciprocal. A participant is entitled to a grade from another’s instruction only to the extent that its own instruction offers that grade in return. Each direction therefore carries the lesser of the recognizing participant’s ceiling, the counterparty’s ceiling and the counterparty’s class cap. Recognition remains directed, and the two directions differ whenever the nodes hold different classes. Reciprocity limits each side’s entitlement to what it offers. This second hypothesis lets one deposit per participant reproduce the relation that pairwise negotiation would have reached. A participant filing no instruction offers a ceiling of none, giving a pair grade of none and no edge.

No participant is obliged to install one. A participant may rely entirely on explicit per-counterparty recognition and retain full participant status. It gains fewer edges through bilateral negotiation within the multilateral network.

If an explicit bilateral recognition and a standing instruction both admit a jurisdiction, they supply separate grounds for the same acceptance. The stronger governs, as when mutual recognition agreements over one corridor compose by taking the strongest resolved grade. The class ceiling still binds every ground within the protocol’s conformance scope, so the grade is the lesser of that ceiling and the strongest ground. A bilateral instrument asserting more than the ceiling allows is outside conformance and composes nothing here. The published rule resolves overlap without adjudication. Where a bilateral instrument is unregistered, only its two parties can compute the pair grade.

This published resolution of overlapping declarations supplies the fourth hypothesis.

The published machine-readable instruction lets a jurisdiction considering accession compute which counterparties it will reach and at what grade. Each node re-evaluates its instruction at every published register head, so an edge follows the counterparty’s current class and falls with it. A participant’s own narrowing applies prospectively, leaving already committed corridors unchanged. A counterparty’s class reduction takes effect at the next evaluation because no counterparty instrument supports an edge above its source’s present strength.

The register is evidence

The register is an append-only transparency log of signed declarations. Nodes require none of its state for validation.

A node can complete every required verification without access to the register, which is never a precondition of a corridor transition. The published log permits any participant to mirror it in full and independently verify its head. Corridors continue if the register becomes unavailable. Existing recognition edges also stand if the register is wrong, because each participant keeps those edges in its own registry under its own signature.

The instruction reads register facts, so its local signature alone does not prevent dependence on the log. Two further properties constrain that dependence. Every entry is self-authenticating: a deposit carries the competent authority’s signature, and a listing carries the operator’s signed result and the suite’s identity. A participant’s node verifies each entry itself. The log can omit an entry but cannot manufacture one.

Every listing is also independently re-runnable against its live endpoint, using credentials the operator publishes for a monitor role. Published evidence can therefore reveal a node’s loss of conformance without the log’s cooperation. The tested party still hosts the test. An operator that distinguishes suite traffic from production traffic can conform to the first alone. Self-administered testing supplies evidence of conformance, not proof, and evidence of divergent behavior can defeat a listing.

Omission and delay remain availability risks. They cost the affected jurisdiction edges until the omission is shown, with its authority’s signed deposit providing the proof. Each participant republishes the edge set its instruction produced against the verified head, making the age of its view public.

The register makes who declared what, and when publicly checkable.

Certificate transparency likewise places its log outside the trust boundary. Consistency proofs establish its append-only property, and comparison of tree heads detects divergent histories. It does require a certificate to appear in a log before acceptance. In this register, appearance is a condition of nothing. Both constructions make divergent histories detectable, provided someone monitors them. Monitors, an independently re-runnable suite, and a published challenge route are therefore required parts of the design.

Accession, in eight steps

Accession has eight steps. None requires a discretionary act by the standards body, the council that maintains the register, or an existing participant. No participant can stop an accession. A current conformance listing is a precondition of deposit, so the suite is the one gate outside the acceding jurisdiction’s control. The standards body writes and revises that published, self-administered test on published notice. Its influence over who joins is limited to this gate.

Designation. The jurisdiction designates its competent authority by official function, never by an individual’s name. Examples are the registrar of companies, the financial services authority, or the ministry responsible for the commercial register. The designation carries public key material and the provenance chain binding the key to that function. The protocol applies no test to a competent authority. Neither the standards body nor the council may assess it, and their assessment cannot condition any participant’s recognition. A participant expresses its view of another’s competent authority through declination, with the same bilateral effect and publication as any other declination.

Commissioning. The jurisdiction chooses who builds and operates its node: itself, a state agency, an accredited operator, a systems integrator, or another provider. It may use an independent implementation without licensing the reference implementation. The protocol tests the node’s behavior and imposes no requirement on its builder or operator.

Certification. The operator runs the published suite and publishes the result as its listing: conformance class, tested specification version, date, and evidence. Self-certification with published evidence removes the need for a bilateral assessment contract with a private gatekeeper. The listing stays current while the node meets the version-currency requirement and each re-certification trigger. Its lapse date follows mechanically from published dates, without a council act or discretionary computation. A jurisdiction whose listing lapses retains participant status but loses edges under other participants’ instructions. Re-certification restores those edges without a fresh deposit or declination window.

Deposit. The competent authority deposits the instrument of accession with the depositary, a body of a class participants already accept for that purpose and distinct from the council that maintains the register. The depositary receives it without discretion.

Notification. The council publishes notification of the deposit to every participant within thirty days of receiving it.

The declination window. For six months from the depositary’s dated receipt, any existing participant may decline the accession between itself and the acceding jurisdiction. The clock starts at deposit, so administrative delay cannot shorten the window or postpone entry into force. Publication informs participants of the deposit. A participant receiving late notice keeps the balance of its window from actual notice, as the third hypothesis requires.

Two Hague conventions supply evidence for this default. Under the Apostille Convention, where silence consents, eighty-eight states acceded. Twenty-one accessions drew an objection, with each objection suppressing only one pair. Under the Evidence Convention, fifty states acceded, and Article 39 requires affirmative acceptance for every relation. All fifty therefore remain subject to an acceptance procedure. The instruments also differ in other respects, including the Evidence Convention’s limits on eligibility to accede.

The comparison supplies strong evidence, not a controlled experiment.

Entry into force. On a fixed day after the window closes, pair by pair.

Publication. The register records the accession in force, together with the pairwise map that results from every participant’s published instruction.

The jurisdiction performs steps one and two. Step three is machine-decided, and step four is a deposit. Each participant controls step six, the sequence’s only discretionary step. Steps five, seven and eight require administration on published dates, without administrative discretion.

Declination

Only a participant may decline, acting under signature through its designated competent authority. The standards body, council, accredited operators, and node operators that are not competent authorities hold no such power. Every jurisdiction chooses its own counterparties, retaining sovereign control of exclusion.

The effect is bilateral. A declination prevents the protocol from entering into force between the declining participant and the named jurisdiction. It does not delay or condition accession, reduce the acceding jurisdiction’s conformance class, or remove or downgrade its listing. It leaves that jurisdiction’s relations with other participants unchanged. Every other edge the declining participant holds also retains its grade.

A declination adds one name to the participant’s exclusion set, so its node emits no edge to that jurisdiction. Indirect recognition still requires a separate rule. Recognition composes along paths at the weakest hop’s grade, so a two-hop route can bypass the deleted edge. The participant could receive through a neighbor the determinations it declined directly.

To refuse such determinations, the recipient needs a record of the authorities involved in their composition.

A composed determination carries a recognition set: the unordered set of authorities whose grades composed to produce it. Each authority adds itself under its own signature. A declining participant refuses any determination whose recognition set contains the excluded jurisdiction. Refusal is a membership test and does not read order. Recognition composes by meet, which is commutative and idempotent, while an ordered sequence is neither and would break that composition. Verdict provenance already accumulates this set.

The mechanism has three limits.

The set names the authorities whose determinations composed and says nothing about where the entity has been. Prior incorporation, filing or screening in the excluded jurisdiction leaves an entity unaffected. This distinction matters because the compliance passport carries the entity’s full evaluation history.

Each signature attests only to the set its signer presented. A participant can drop a predecessor and sign the shortened set while every signature still verifies. No signature binds to its predecessor’s, and the object contains no commitment to the number of authorities that should appear. Establishing completeness requires an external anchor, which the register expressly does not provide.

A receiving node can locally check that every pair of authorities it can order from the published map holds an edge. This refutes a shortcut across a non-edge but refutes nothing in a dense network. The set therefore supplies attestation without proof of completeness.

The set reaches carried recognition only. An intermediary may consume a foreign determination as evidence and issue its own fresh evaluation. The resulting determination and recognition set identify the intermediary, allowing the excluded jurisdiction’s conclusion to arrive without its name. The protocol expressly permits this route: sovereign authority includes fresh evaluation, and the intermediary owns the resulting determination.

Exclusion that reaches transit requires a different instrument within the same boundaries. Standing instructions and the pairwise map they produce are public. A declining participant can compute which participants hold an edge to its excluded jurisdiction and narrow its instruction against that neighborhood. This exclusion by closure uses local computation on published data and needs no wire object. It reaches transit that inspection of a recognition set cannot exclude. It also declines participants solely because of their relationship with the excluded jurisdiction. Each sovereign decides whether to accept that cost.

The recognition set has narrower costs. A declining participant loses composed traffic that merely passed through the excluded jurisdiction as well as traffic originating there. Every downstream recipient sees the set and learns which authorities composed the determination, a disclosure participants should weigh before accession.

The set also distinguishes a determination that traveled from one that did not. Route coherence means that a staged and direct route deliver the same arrival state. With recognition sets, this property holds only in the grade component, not on the whole object.

The declining participant’s node performs every step against the incoming object’s set and verifies its signatures itself. No network act is involved.

No grounds are required, and publication is. Declination is a unilateral sovereign act requiring no justification. A state party to the Apostille Convention can likewise object to accession without stating a reason. The register publishes who declined, whom, and when, together with any grounds the participant chooses to state.

Requiring grounds would create an adjudicator, which the protocol excludes. Publication records the sovereign act, whose effect begins at signature. If delaying publication could delay that effect, the register would gain a veto over the acts it records. Publication and attribution instead make declination a named act with a diplomatic cost.

A participant may instead narrow its instruction by raising its ceiling grade, minimum class, or version floor until the target falls out. The narrowed instruction remains public in machine-readable form, so anyone can compute the counterparties it drops. Both methods make exclusion visible, but they have different effects. A lodged declination also refuses composed determinations naming the excluded jurisdiction, while a narrowed instruction only stops the participant’s own edge. The wider effect requires a lodged declination and its diplomatic cost.

A participant may withdraw a declination at any time by signed notice to the counterparty, effective on that notice. The acceding jurisdiction holds the same right in the other direction, exercisable at deposit. After entry into force, the same instrument permits suspension by signed notice, effective on notice. It states whether open corridors settle or freeze, with settlement the default. Freezing others’ transactions exceeds withdrawal of one’s own recognition.

Grades, and the one domain that travels only under an instrument

Per-domain recognition grades are subject to one constraint that no ordinary instrument may vary.

Sanctions is never recognized by ordinary corridor grade. Every recognition edge, ordinary corridor instrument and standing instruction assigns it the grade none. A node that emits a recognition object carrying the sanctions domain on an ordinary corridor is non-conformant.

Recognition transports assessments of an entity’s controls or data handling against a standard. A sanctions clearance instead asserts that the entity appears on none of this jurisdiction’s lists. This membership test answers another jurisdiction’s question only where the first applies every designation that the second applies.

Containment is directed: the destination must apply no list the source does not. Suppose one participant applies only a shared list and another applies that list with national additions. The second’s clearance settles the first’s question, but the first’s does not settle the second’s. Shared authority is the symmetric case, with containment in both directions.

A certificate records either case. It names the authority or lists relied on, covered directions, bound parties, applicable corridor epochs, validity window, and revocation procedure. Only corridors covered by such a certificate inherit the sanctions domain. Every general-purpose corridor screens sanctions locally, whatever else it recognizes. Without the certificate, inherited clearance would wrongly clear precisely the entities the destination has designated and the source has not. This failure is incompatible with a compliance network.

A second invariant requires every wire object to declare explicitly the legal tradition under which it was produced. There is no default or implicit value. A node refuses to start if its deployment manifest omits the declaration. Silent defaulting would produce answers under rules nobody chose.

What the standards body holds

Before any deposit, the protocol must state the private standards body’s five holdings and their limits.

The specification and suite. The body authors, versions and releases both on a published cadence with published notice periods. Its greater influence through the suite requires a limit: revisions cannot cause a current listing to lapse within its tested version’s currency window. A participant has that window to re-certify, or decline the revision and retain its existing standing until the window closes. The body certifies conformance and holds no power over recognition.

The conformance mark. The standards body licenses a mark on uniform published terms to the operator of a node holding a current listing. The license is the only instrument between them: conformance requires no audit agreement, assessment contract, or delivery agreement. The mark also provides enforcement through withdrawal of a listing on lapse, without withdrawal of a right. Losing the listing removes every counterparty’s standing recognition. This commercially decisive consequence needs no enforcement by a court in the acceding state.

Two constraints govern the mark. It cannot be a statutory certification mark: under 15 U.S.C. § 1064(5)(B) a United States certification-mark registration is cancellable at any time where the proprietor “engages in the production or marketing of any goods or services to which the certification mark is applied”. The workable instrument is an ordinary trademark license coupled to a published suite and public evidence repository. It voluntarily adopts the non-discrimination duty of § 1064(5)(D) by contract.

The second constraint concerns termination. An uncured material breach after notice ends such a license. The standards body interprets and exercises that right itself, although termination costs the operator every counterparty’s recognition. The license must therefore define material breach exhaustively and name the forum and governing law for disputes. The council can decide only whether a stated formal defect existed, so the license must name an arbitral forum outside this protocol. Without all three terms, the mark gives the standards body discretionary control over membership, defeating the allocation of powers stated here.

Published, self-administered testing also minimizes the admission process’s antitrust exposure. Refusals concern only stated formal defects, which a jurisdiction may cure before immediately redepositing. With no refusal on the merits, little remains to litigate.

One seat on the council. A legally separate council, constituted by the protocol, maintains the register. Each participant holds a seat and a vote. The standards body has one seat and one vote, with no veto, chair, or depositary function. The council’s exhaustive ministerial powers are receipt, notification, publication, and one narrow appeal about whether a stated formal defect existed. It cannot admit, exclude, grade or assess.

The reference implementation, published on open terms, which nobody is required to use.

A fee for publication, listing and suite maintenance, on uniform published terms. The standards body holds it until the supervisory body described below is constituted, when it passes to that body.

The standards body cannot admit or exclude a jurisdiction, object to accession, grade sovereign determinations, or appoint a competent authority. It also cannot amend the four boundaries, which lie entirely outside the amendment procedure. A disinterested supervisory body holds fee-setting and data-openness obligations. Accession Networks establishes the necessity of this body, which also supplies the design’s principal legal protection.

The standard-setting antitrust cases — Radiant Burners, American Society of Mechanical Engineers v. Hydrolevel, Allied Tube — attach exposure to discretion in processes subject to competitor influence. A decision-maker without an economic interest in exclusion removes the facts that theory requires. An operator trading in the certified market cannot achieve that separation through drafting.

The precedents this design copies

The design adopts mechanisms from ratified instruments where available. Treaty membership figures below are as at 1 September 2026 and may change.

These precedents support the form of accession more directly than its expected rate. The Apostille’s 130 parties accumulated over sixty years. The closest modern analogue for a machine-readable standard, the UNCITRAL Model Law on Electronic Transferable Records, has thirteen adopting jurisdictions in nine years. The Apostille supplies the structural precedent, while the Model Law supplies the much slower rate precedent.

The Hague Apostille Convention supplies the unilateral-accession-with-declination mechanism: eighty-eight accessions, twenty-one drawing an objection, and none blocked. These counts use the depositary’s status table as last updated on 30 June 2026. They count rows recording accession and the objected subset separately. Under Article 12, each objection removed one pair and left all other relations and the accession itself unchanged.

The design draws two-sided establishment of relations and the withdrawal right from the 2019 Hague Judgments Convention rather than the Apostille’s older drafting. Under Article 29, a relation forms unless either side notifies against it. An incumbent may notify within twelve months, and the acceding state may notify at deposit. Either may withdraw its notification at any time. This protocol adopts those two-sided rights but keeps six months rather than Article 29’s twelve because a node reconfigures faster than a foreign ministry.

The Cape Town system separates three roles: commercial registrar, intergovernmental supervisor, and depositary. Its International Registry opened on 1 March 2006. An Irish company jointly owned by a private firm and a national government has served as registrar since then. An intergovernmental supervisory authority appoints and can dismiss it, owns the data, sets fees, and approves regulations. A third body serves as depositary. Eighty-seven states are party to the Aircraft Protocol under which the register runs, sixty-nine by accession.

Cape Town also supplies a portability clause (Article 17(2)(c)) and asset separation under which the operator never owns the data (Article 17(4)). Under Article 28, the operator answers for its own errors, omissions and system malfunctions, except an inevitable and irresistible event. It never answers for the truth of participant filings. The treaty also requires insurance at a level set by the supervisor (Article 28(4)) and makes the register archive inviolable (Article 27(4)). The latter is a treaty immunity available only to a register constituted by treaty.

The governance structure comes from the Global Legal Entity Identifier Foundation. Its oversight body’s charter creates no legal rights or obligations of its own. The foundation’s statutes provide each power: inspection, hearings, reports, and a duty for the board to publish reasons when it declines a recommendation. A public supervisor polices the arrangement, which has a non-profit purpose and an asset lock.

The BEPS Multilateral Instrument supplies modification by intersecting declarations. One deposited text modifies existing bilateral instruments according to each party’s filed declarations. By mid-2026, it had modified more than sixteen hundred bilateral tax treaties across one hundred and seven jurisdictions, from a single text in under a decade.

These mechanisms were designed for other fields. Their adoption gives ministries recognized precedents for each part of the proposed compliance protocol.

Open questions

Three legal questions remain open.

Whether an authority will accept recognition that reached it through an intermediary. The composition results assume a determination that travelled A \to B \to C is capable of being given effect at C. Each jurisdiction’s law determines whether that effect is available, on which the value of composition depends. The design leaves this legal question open. The protocol also does not itself make private obligations enforceable. The companion paper Recourse defines a separate construction for consent, locally hosted arbitration, provider execution, satisfaction, and recovery under their own competent sources.

Whether technical conformance is a proxy for legal assurance. A node that passes the suite behaves as specified at an endpoint. That says nothing about the quality of the jurisdiction’s supervision, the competence of its authority, or the truth of what it files. The protocol certifies software behavior alone. Some participants at scale will infer institutional quality from conformance listings, but the protocol supplies no basis for that inference.

Where liability lands when a jurisdiction relies and the reliance was misplaced. In the United States the standard-setting cases put the duty where the control is. Applying section 324A of the Restatement (Second) of Torts, a New Jersey trial court found no duty for a body unable to compel compliance (Meyers v. Donnatacci, 220 N.J. Super. 73 (Law Div. 1987)). The state’s supreme court found a duty for a body that accredited and inspected members, with reports a regulator accepted instead of its own inspections (Snyder v. American Association of Blood Banks, 144 N.J. 269 (1996)).

Those cases concern physical injury under a rule limited to physical harm, while misplaced recognition causes economic loss. No court has yet extended their reasoning across that gap. Negligent misstatement would provide the route to economic loss, rather than the section on which these cases rely. Exposure remains unsettled. A network built around authorities relying on others’ findings instead of evaluating for themselves will test that boundary. The design addresses the exposure through a separate certifier entity, reliance limits published on the artifact itself, and insurance at a level the supervisory body sets.

The result

A jurisdiction designates an authority, commissions a node, runs the suite, deposits an instrument, and publishes its standing recognition instruction. Each participant then computes recognition locally from its own state, under its own signature.

The instrument satisfies the companion theorem’s five hypotheses and therefore yields the relation that unconstrained bilateral negotiation would eventually produce. It uses one instrument per participant instead of one per pair. Each participant retains its decisions, and no central body acquires the powers reserved to sovereigns.

References

Allied Tube & Conduit Corp. v. Indian Head, Inc., 486 U.S. 492 (1988).

American Society of Mechanical Engineers v. Hydrolevel Corp., 456 U.S. 556 (1982).

Convention Abolishing the Requirement of Legalisation for Foreign Public Documents. The Hague, 5 October 1961, Articles 6, 12 and 15.

Convention on International Interests in Mobile Equipment. Cape Town, 16 November 2001, Articles 17, 27 and 28, and the Protocol thereto on Matters Specific to Aircraft Equipment, Cape Town, 16 November 2001.

Convention on the Recognition and Enforcement of Foreign Judgments in Civil or Commercial Matters. The Hague, 2 July 2019, Articles 24, 29 and 32.

Convention on the Taking of Evidence Abroad in Civil or Commercial Matters. The Hague, 18 March 1970, Article 39.

Global Legal Entity Identifier Foundation. Statutes of 7 August 2018, Articles 2, 3, 4, 30, 31 and 39; and Regulatory Oversight Committee Charter, § 20.

Hague Conference on Private International Law. Status tables for the Conventions of 5 October 1961 and 18 March 1970. Retrieved 1 September 2026.

Laurie, B., Langley, A., and Kasper, E. Certificate Transparency. RFC 6962, Internet Engineering Task Force, 2013. Obsoleted by Laurie, B., Messeri, E., and Stradling, R. Certificate Transparency Version 2.0. RFC 9162, 2021.

Multilateral Convention to Implement Tax Treaty Related Measures to Prevent Base Erosion and Profit Shifting. Paris, 24 November 2016. Signatories and parties, status as at 18 June 2026.

Radiant Burners, Inc. v. Peoples Gas Light & Coke Co., 364 U.S. 656 (1961).

Restatement (Second) of Torts § 324A. American Law Institute, 1965.

UNIDROIT. Status — Protocol on Matters Specific to Aircraft Equipment. Retrieved 1 September 2026.

Lanham Act, 15 U.S.C. § 1064(5).