@agent-custody/receipts 0.1.2 → 0.1.3

package/README.md

@@ -231,6 +231,7 @@ src/sdk/index.ts   the interceptor: policy decision, record, wrap(tool fn)
 src/sdk/claude.ts  Claude Code command hook and Claude Agent SDK in-process hooks
 src/sdk/openai-agents.ts, vercel-ai.ts, langchain.ts   framework adapters, tested against the real packages
 src/sidecar.ts     the SDK issuer behind a local HTTP API, for agents in other languages
+vectors/           conformance vectors: receipts, keys, logs, proofs, and expected verdicts; `bun run vectors` regenerates them
 src/verify.ts      offline verification, the human-readable report, and the audit that a later log extends an earlier one
 src/cli.ts         keygen, grant, gateway, hook, serve, log, verify, audit
 src/index.ts       the package's public surface; adapters are exported on ./sdk/<framework> subpaths
@@ -253,6 +254,8 @@ The design is two producers feeding one verifier. The SDK is the top of the funn
 - SDK core: policy decision, record, and a generic `wrap(tool, fn)` for any framework whose tools are functions.
 - Claude Code command hook for PreToolUse, PostToolUse, and PostToolUseFailure, with blocking on deny.
 - Claude Agent SDK in-process hooks over the same handler.
+- The forwarded call carries the receipt id and the attested agent and principal in `_meta`, so a stateful upstream can cite the receipt; the memory server in `@agent-custody/state` runs this way.
+- Conformance vectors, generated by the test suite and published with the spec, and a browser verifier on agent-custody.dev that passes all of them.
 - Sidecar: the SDK issuer behind a local HTTP API (`serve`), with a Python package on PyPI-ready footing and Go, Java, and Rust clients, so agents in any language get the same receipts from one signing implementation.
 - Consistency proofs between tree heads (RFC 9162), served by the log and checked by the `audit` command, so an auditor holding an old tree head can prove nothing before it was rewritten.
 - Remote log: the issuer can append to a log run by someone else over HTTP, whose key then signs the tree heads, so a verifier learns the receipt was in a log the operator could not rewrite. Includes the reference log server, bearer-token auth, and a root endpoint for auditors.

package/dist/crypto.d.ts

@@ -21,6 +21,8 @@ export declare function writeKeyPair(kp: KeyPair, dir: string, name: string): {
 };
 export declare function loadPrivateKey(path: string): KeyPair;
 export declare function loadPublicKey(path: string): PublicKeyRef;
+/** A public key from its SPKI PEM text, as found in a .pub file or a conformance vector. */
+export declare function publicKeyFromPem(pem: string): PublicKeyRef;
 export interface Envelope {
     payloadType: string;
     payload: string;

package/dist/crypto.js

@@ -50,7 +50,11 @@ export function loadPrivateKey(path) {
     return { privateKey, publicKey, keyid: keyidOf(publicKey) };
 }
 export function loadPublicKey(path) {
-    const publicKey = createPublicKey(readFileSync(path));
+    return publicKeyFromPem(readFileSync(path, "utf8"));
+}
+/** A public key from its SPKI PEM text, as found in a .pub file or a conformance vector. */
+export function publicKeyFromPem(pem) {
+    const publicKey = createPublicKey(pem);
     return { publicKey, keyid: keyidOf(publicKey) };
 }
 function pae(payloadType, payload) {

package/dist/gateway.d.ts

@@ -4,6 +4,9 @@ import { type Delegation } from "./delegation.ts";
 export declare const GATEWAY_VERSION = "0.1.0";
 export declare const RECEIPT_META_KEY = "agent-custody/receipt";
 export declare const MODEL_META_KEY = "agent-custody/model";
+/** Set by the gateway on the call it forwards upstream: the receipt id, and the agent and principal from the attested grant. */
+export declare const AGENT_META_KEY = "agent-custody/agent";
+export declare const PRINCIPAL_META_KEY = "agent-custody/principal";
 export interface CallParams {
     name: string;
     arguments?: Record<string, unknown>;

package/dist/gateway.js

@@ -15,6 +15,9 @@ import { evaluate, policyDigest } from "./policy.js";
 export const GATEWAY_VERSION = "0.1.0";
 export const RECEIPT_META_KEY = "agent-custody/receipt";
 export const MODEL_META_KEY = "agent-custody/model";
+/** Set by the gateway on the call it forwards upstream: the receipt id, and the agent and principal from the attested grant. */
+export const AGENT_META_KEY = "agent-custody/agent";
+export const PRINCIPAL_META_KEY = "agent-custody/principal";
 function resolveFactArgs(template, args) {
     const out = {};
     for (const [k, v] of Object.entries(template)) {
@@ -58,7 +61,7 @@ export async function createGateway(cfg) {
     const issuer = createIssuer(gatewayKey, cfg.receiptsDir, openLog(cfg, gatewayKey));
     const upstream = new Client({ name: "agent-custody-gateway", version: GATEWAY_VERSION });
     await upstream.connect(new StdioClientTransport({ command: cfg.upstream.command, args: cfg.upstream.args, env: cfg.upstream.env, stderr: "inherit" }));
-    const callUpstream = async (name, args) => (await upstream.callTool({ name, arguments: args }));
+    const callUpstream = async (name, args, meta) => (await upstream.callTool({ name, arguments: args, ...(meta ? { _meta: meta } : {}) }));
     async function gatherFacts(tool, args) {
         const facts = {};
         for (const f of cfg.facts.filter((f) => f.forTools.includes(tool))) {
@@ -98,7 +101,9 @@ export async function createGateway(cfg) {
         }
         if (policy.decision === "allow") {
             try {
-                const result = await callUpstream(tool, args);
+                // The upstream learns which receipt this call is, and who the grant says is calling. An upstream that keeps
+                // state, such as the memory server, cites the receipt as the source of what it stores.
+                const result = await callUpstream(tool, args, { [RECEIPT_META_KEY]: receiptId, [AGENT_META_KEY]: delegation.agent, [PRINCIPAL_META_KEY]: delegation.principal });
                 execution = { status: result.isError ? "failed" : "executed", result, resultDigest: digestOf(result), provenance: "observed" };
             }
             catch (e) {

package/docs/usage.md

@@ -190,6 +190,10 @@ Any other MCP client works the same way: Python's `mcp` package, LangGraph's MCP
 
 The receipt id is the file name under `receiptsDir`.
 
+## What the upstream gets
+
+The call the gateway forwards carries three `_meta` keys the agent cannot set: `agent-custody/receipt`, the id of the receipt being issued for this call; `agent-custody/agent` and `agent-custody/principal`, from the signed delegation grant. An upstream that keeps state can cite the receipt as the source of what it stores and record the attested caller rather than a claimed one. The memory server in `@agent-custody/state` does exactly that. Fact lookups do not carry them; only the forwarded call does.
+
 ## Operational notes
 
 - **Money is integer minor units.** Cedar has no floating point. A float in `args` that a policy touches is an evaluation error, which is a deny.

package/docs/verification.md

@@ -98,6 +98,10 @@ A gateway receipt does **not** support:
 - that the model named in `model` produced the call. No hosted provider signs model identity.
 - that the gateway operator is honest. The operator holds the gateway key. Against a dishonest operator you need a log copy taken out of their control, or a signer they do not control. See the threat model table in the README.
 
+## In the browser
+
+[agent-custody.dev/verify](https://agent-custody.dev/verify) runs the same checks in the page over WebCrypto, nothing uploaded. It is a second implementation of this verifier, and it passes every published [conformance vector](https://agent-custody.dev/receipt/vectors).
+
 ## Programmatic verification
 
 ```ts
@@ -157,3 +161,7 @@ Programmatically, `auditExtends(older.treeHead, newer.treeHead, proof, keys)` re
 
 The remote log also serves `GET /head`, its current tree head signed with the log's key, so an auditor can record heads on a schedule and later audit any two of them without holding a receipt for each.
 
+## Conformance vectors
+
+`vectors/` in the package holds fixed receipts, keys, logs, proofs, and the verdicts this verifier produces for them, generated by `bun run vectors` and checked by the test suite on every run. A verifier written elsewhere proves it agrees by reproducing every verdict. They are published at [agent-custody.dev/receipt/vectors](https://agent-custody.dev/receipt/vectors).
+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-custody/receipts",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Chain of custody for AI agents: signed, independently verifiable receipts for tool calls. MCP gateway + Cedar policy + Merkle transparency log",
   "license": "Apache-2.0",
   "repository": {
@@ -43,13 +43,15 @@
   },
   "files": [
     "dist",
-    "docs"
+    "docs",
+    "vectors"
   ],
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
-    "demo": "tsx scripts/demo.ts"
+    "demo": "tsx scripts/demo.ts",
+    "vectors": "tsx scripts/vectors.ts"
   },
   "engines": {
     "node": ">=22"

package/vectors/audit.json

@@ -0,0 +1,147 @@
+{
+  "version": "0.2",
+  "note": "auditExtends(older, newer, proof, keys): both tree heads must verify against a listed key; the proof is the log's consistency proof between their sizes.",
+  "cases": [
+    {
+      "name": "remote-log-extends",
+      "description": "The tree head from the first remote receipt and the log's later head, with the proof the log served.",
+      "older": {
+        "payloadType": "application/vnd.agent-custody.treehead+json",
+        "payload": "eyJyb290SGFzaCI6Ijg3MzM5M2E4ZTQ4ZmFkNzVlMmRkMzY1MzRjNmRjNzUzMTc5YmM0NmEzMTAxNDZjZTI2OGUxNTc2ODZiOGMwZTQiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjExMFoiLCJ0cmVlU2l6ZSI6MX0=",
+        "signatures": [
+          {
+            "keyid": "e1ed29255a4bd710006fe9ad333514e71c705608b769029088a818f57bcf080a",
+            "sig": "vydFxb4Z753KUPOXLEFiYnE0nntaoU9xXtBe7IMW8eucYeef+XpGu+4+bXpo/zYZATcx4h+7bMmDd3frqizkBg=="
+          }
+        ]
+      },
+      "newer": {
+        "payloadType": "application/vnd.agent-custody.treehead+json",
+        "payload": "eyJyb290SGFzaCI6ImNlYmViNDAzYjNlZWYzYzgwNWVjYzg5OTI2NTM0ZGM0NjkxY2I4OWJlN2I0ZjFjNjE3Njg5MDFkMzIxNDkzYmEiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjExNFoiLCJ0cmVlU2l6ZSI6Mn0=",
+        "signatures": [
+          {
+            "keyid": "e1ed29255a4bd710006fe9ad333514e71c705608b769029088a818f57bcf080a",
+            "sig": "iyUBqiJcZd/RaEDXWhhxl34ekqy6tQ9qgsMQjAXlvuHS75aqPLeh0NRtUQB89LS2UMJYihmcSUdg/Z82uORqCQ=="
+          }
+        ]
+      },
+      "proof": [
+        "4869289b5853ed3431c235a1f4e97d1d4205723e622dc71bd836018c62572723"
+      ],
+      "keys": [
+        "log"
+      ],
+      "expected": {
+        "ok": true,
+        "failing": []
+      }
+    },
+    {
+      "name": "remote-log-wrong-order",
+      "description": "The same heads the wrong way round.",
+      "older": {
+        "payloadType": "application/vnd.agent-custody.treehead+json",
+        "payload": "eyJyb290SGFzaCI6ImNlYmViNDAzYjNlZWYzYzgwNWVjYzg5OTI2NTM0ZGM0NjkxY2I4OWJlN2I0ZjFjNjE3Njg5MDFkMzIxNDkzYmEiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjExNFoiLCJ0cmVlU2l6ZSI6Mn0=",
+        "signatures": [
+          {
+            "keyid": "e1ed29255a4bd710006fe9ad333514e71c705608b769029088a818f57bcf080a",
+            "sig": "iyUBqiJcZd/RaEDXWhhxl34ekqy6tQ9qgsMQjAXlvuHS75aqPLeh0NRtUQB89LS2UMJYihmcSUdg/Z82uORqCQ=="
+          }
+        ]
+      },
+      "newer": {
+        "payloadType": "application/vnd.agent-custody.treehead+json",
+        "payload": "eyJyb290SGFzaCI6Ijg3MzM5M2E4ZTQ4ZmFkNzVlMmRkMzY1MzRjNmRjNzUzMTc5YmM0NmEzMTAxNDZjZTI2OGUxNTc2ODZiOGMwZTQiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjExMFoiLCJ0cmVlU2l6ZSI6MX0=",
+        "signatures": [
+          {
+            "keyid": "e1ed29255a4bd710006fe9ad333514e71c705608b769029088a818f57bcf080a",
+            "sig": "vydFxb4Z753KUPOXLEFiYnE0nntaoU9xXtBe7IMW8eucYeef+XpGu+4+bXpo/zYZATcx4h+7bMmDd3frqizkBg=="
+          }
+        ]
+      },
+      "proof": [
+        "4869289b5853ed3431c235a1f4e97d1d4205723e622dc71bd836018c62572723"
+      ],
+      "keys": [
+        "log"
+      ],
+      "expected": {
+        "ok": false,
+        "failing": [
+          "older is not larger than newer"
+        ]
+      }
+    },
+    {
+      "name": "remote-log-wrong-key",
+      "description": "Tree heads checked against the app key, which did not sign them.",
+      "older": {
+        "payloadType": "application/vnd.agent-custody.treehead+json",
+        "payload": "eyJyb290SGFzaCI6Ijg3MzM5M2E4ZTQ4ZmFkNzVlMmRkMzY1MzRjNmRjNzUzMTc5YmM0NmEzMTAxNDZjZTI2OGUxNTc2ODZiOGMwZTQiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjExMFoiLCJ0cmVlU2l6ZSI6MX0=",
+        "signatures": [
+          {
+            "keyid": "e1ed29255a4bd710006fe9ad333514e71c705608b769029088a818f57bcf080a",
+            "sig": "vydFxb4Z753KUPOXLEFiYnE0nntaoU9xXtBe7IMW8eucYeef+XpGu+4+bXpo/zYZATcx4h+7bMmDd3frqizkBg=="
+          }
+        ]
+      },
+      "newer": {
+        "payloadType": "application/vnd.agent-custody.treehead+json",
+        "payload": "eyJyb290SGFzaCI6ImNlYmViNDAzYjNlZWYzYzgwNWVjYzg5OTI2NTM0ZGM0NjkxY2I4OWJlN2I0ZjFjNjE3Njg5MDFkMzIxNDkzYmEiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjExNFoiLCJ0cmVlU2l6ZSI6Mn0=",
+        "signatures": [
+          {
+            "keyid": "e1ed29255a4bd710006fe9ad333514e71c705608b769029088a818f57bcf080a",
+            "sig": "iyUBqiJcZd/RaEDXWhhxl34ekqy6tQ9qgsMQjAXlvuHS75aqPLeh0NRtUQB89LS2UMJYihmcSUdg/Z82uORqCQ=="
+          }
+        ]
+      },
+      "proof": [
+        "4869289b5853ed3431c235a1f4e97d1d4205723e622dc71bd836018c62572723"
+      ],
+      "keys": [
+        "app"
+      ],
+      "expected": {
+        "ok": false,
+        "failing": [
+          "older tree head signature",
+          "newer tree head signature"
+        ]
+      }
+    },
+    {
+      "name": "remote-log-bad-proof",
+      "description": "A proof with a hash removed.",
+      "older": {
+        "payloadType": "application/vnd.agent-custody.treehead+json",
+        "payload": "eyJyb290SGFzaCI6Ijg3MzM5M2E4ZTQ4ZmFkNzVlMmRkMzY1MzRjNmRjNzUzMTc5YmM0NmEzMTAxNDZjZTI2OGUxNTc2ODZiOGMwZTQiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjExMFoiLCJ0cmVlU2l6ZSI6MX0=",
+        "signatures": [
+          {
+            "keyid": "e1ed29255a4bd710006fe9ad333514e71c705608b769029088a818f57bcf080a",
+            "sig": "vydFxb4Z753KUPOXLEFiYnE0nntaoU9xXtBe7IMW8eucYeef+XpGu+4+bXpo/zYZATcx4h+7bMmDd3frqizkBg=="
+          }
+        ]
+      },
+      "newer": {
+        "payloadType": "application/vnd.agent-custody.treehead+json",
+        "payload": "eyJyb290SGFzaCI6ImNlYmViNDAzYjNlZWYzYzgwNWVjYzg5OTI2NTM0ZGM0NjkxY2I4OWJlN2I0ZjFjNjE3Njg5MDFkMzIxNDkzYmEiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjExNFoiLCJ0cmVlU2l6ZSI6Mn0=",
+        "signatures": [
+          {
+            "keyid": "e1ed29255a4bd710006fe9ad333514e71c705608b769029088a818f57bcf080a",
+            "sig": "iyUBqiJcZd/RaEDXWhhxl34ekqy6tQ9qgsMQjAXlvuHS75aqPLeh0NRtUQB89LS2UMJYihmcSUdg/Z82uORqCQ=="
+          }
+        ]
+      },
+      "proof": [],
+      "keys": [
+        "log"
+      ],
+      "expected": {
+        "ok": false,
+        "failing": [
+          "newer log extends older log"
+        ]
+      }
+    }
+  ]
+}

package/vectors/canonical.json

@@ -0,0 +1,76 @@
+{
+  "version": "0.2",
+  "note": "canonical JSON: keys sorted, no whitespace, undefined dropped. digest = hex sha256 of the canonical string. keyid = hex sha256 of the SPKI DER public key. DSSE PAE = 'DSSEv1 ' + len(type) + ' ' + type + ' ' + len(payload) + ' ' + payload, signed with Ed25519.",
+  "values": [
+    {
+      "value": {
+        "b": 1,
+        "a": [
+          3,
+          {
+            "z": null,
+            "y": "ÿ"
+          }
+        ]
+      },
+      "canonical": "{\"a\":[3,{\"y\":\"ÿ\",\"z\":null}],\"b\":1}",
+      "digest": "894fec1144463457d74d1eb8599cf2e04a42723765ec1d1aabb77d658d860f2b"
+    },
+    {
+      "value": "plain",
+      "canonical": "\"plain\"",
+      "digest": "945603a8f587786b463c3f94fce115c0fae88fac2728cc96ddf5981cf7f61741"
+    },
+    {
+      "value": 42,
+      "canonical": "42",
+      "digest": "73475cb40a568e8da8a045ced110137e159f890ac4da883b6b17dc651b3a8049"
+    },
+    {
+      "value": [
+        1,
+        2,
+        3
+      ],
+      "canonical": "[1,2,3]",
+      "digest": "a615eeaee21de5179de080de8c3052c8da901138406ba71c38c032845f7d54f4"
+    },
+    {
+      "value": {
+        "nested": {
+          "deep": {
+            "deeper": true
+          }
+        }
+      },
+      "canonical": "{\"nested\":{\"deep\":{\"deeper\":true}}}",
+      "digest": "d64d85fa17b84e33888c36e22c9543527721099faee1e070943096aa3c9ba4c2"
+    },
+    {
+      "value": {},
+      "canonical": "{}",
+      "digest": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+    }
+  ],
+  "keyid": {
+    "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAEb81f6KaNmH1pNR7KbeIUo9DW65Y0Qsfdxqbtnhs7cg=\n-----END PUBLIC KEY-----\n",
+    "keyid": "0ecde3bf114156b895ceb4ea63daa345271e8ee979f47bc69cbf0266bb93f6f5"
+  },
+  "dsse": {
+    "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAEb81f6KaNmH1pNR7KbeIUo9DW65Y0Qsfdxqbtnhs7cg=\n-----END PUBLIC KEY-----\n",
+    "envelope": {
+      "payloadType": "application/vnd.example+json",
+      "payload": "eyJoZWxsbyI6IndvcmxkIn0=",
+      "signatures": [
+        {
+          "keyid": "0ecde3bf114156b895ceb4ea63daa345271e8ee979f47bc69cbf0266bb93f6f5",
+          "sig": "wkH8ufuyC3BJldxmhFUCImAOo38KyQO/uQMITvTjgikPeE9GIv6OwYEFtQnjcBNzY0+MRTn++dGeMwvVKzIBDw=="
+        }
+      ]
+    },
+    "payloadJson": "{\"hello\":\"world\"}",
+    "paeHex": "445353457631203238206170706c69636174696f6e2f766e642e6578616d706c652b6a736f6e203137207b2268656c6c6f223a22776f726c64227d",
+    "paeSha256": "8a321059588971b8abbbfeb3a5c7f629a14fc46d2ecf12895a79483dde78532e",
+    "expected": true
+  }
+}

package/vectors/merkle.json

@@ -0,0 +1,200 @@
+{
+  "version": "0.2",
+  "note": "leafHash = sha256(0x00 || leaf); nodeHash = sha256(0x01 || left || right). Proof hashes are hex, leaf-to-root for inclusion; RFC 9162 order for consistency.",
+  "leaves": [
+    "leaf-0",
+    "leaf-1",
+    "leaf-2",
+    "leaf-3",
+    "leaf-4",
+    "leaf-5",
+    "leaf-6"
+  ],
+  "leafHashes": [
+    "305df59f9590c3c9ac63d2b2743c388e3792449078cebf7fb3dbe6471643b2b7",
+    "3145c409f259b7c53e32036090ff76751025a2498ba9823ef718cac50b4e616f",
+    "fca89f57c9f8c8eb4047a7ff9d333acf9e0f3384b20b255bceab0f216dcca267",
+    "f76836325aec5699d8d71f8e42e9d47c5c29b08059ba296384f7ca40ad3a40ae",
+    "ea9fc1a1b6e191b460d0d6306e3e870c173f39330f13cda1b70cfc72bdc398ba",
+    "8f1593cb92f429d9340b9bbc1f0bb122adf8026c42a4a42142e2168931727236",
+    "676f3782f5b3a5fb4370ed49572cedc523f4a66322269c85f2af0509d17b0a4d"
+  ],
+  "roots": [
+    "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "305df59f9590c3c9ac63d2b2743c388e3792449078cebf7fb3dbe6471643b2b7",
+    "60a53eed0de87a90c8e59427c59c46253c33a76a09502a51801300927b7e6bdc",
+    "cf763a041c81ceef1578a6083f75c61bef2e0014f2a3e683a97fcfca5be7f19a",
+    "bdd1c5ff55b19cb6b0e7c761bf9a6ccaa27fbbfc07b74f1fabb6e911a0bd2ab3",
+    "00d21829a5503145348abcf712513eacf2a274211ad83e970202bb5b6d80b286",
+    "160cf1a616e8792f9078a9665cb06520d95a33f467d0826f2310219d31383d73",
+    "0b007fb915eb9b2a146f54b1c86ec53b664f8e455b7660b0b6ee13edc0d921c0"
+  ],
+  "inclusion": [
+    {
+      "leafIndex": 0,
+      "treeSize": 7,
+      "hashes": [
+        "3145c409f259b7c53e32036090ff76751025a2498ba9823ef718cac50b4e616f",
+        "bd45ff28796704d88bdac51b1df553fda59837b616d6d1cb2114dbc3b087ff69",
+        "8eae6bd3b3a07f1f75ee72a531629e6eb31e42e62f760e47de52a53c3641ef23"
+      ],
+      "root": "0b007fb915eb9b2a146f54b1c86ec53b664f8e455b7660b0b6ee13edc0d921c0",
+      "expected": true
+    },
+    {
+      "leafIndex": 1,
+      "treeSize": 7,
+      "hashes": [
+        "305df59f9590c3c9ac63d2b2743c388e3792449078cebf7fb3dbe6471643b2b7",
+        "bd45ff28796704d88bdac51b1df553fda59837b616d6d1cb2114dbc3b087ff69",
+        "8eae6bd3b3a07f1f75ee72a531629e6eb31e42e62f760e47de52a53c3641ef23"
+      ],
+      "root": "0b007fb915eb9b2a146f54b1c86ec53b664f8e455b7660b0b6ee13edc0d921c0",
+      "expected": true
+    },
+    {
+      "leafIndex": 2,
+      "treeSize": 7,
+      "hashes": [
+        "f76836325aec5699d8d71f8e42e9d47c5c29b08059ba296384f7ca40ad3a40ae",
+        "60a53eed0de87a90c8e59427c59c46253c33a76a09502a51801300927b7e6bdc",
+        "8eae6bd3b3a07f1f75ee72a531629e6eb31e42e62f760e47de52a53c3641ef23"
+      ],
+      "root": "0b007fb915eb9b2a146f54b1c86ec53b664f8e455b7660b0b6ee13edc0d921c0",
+      "expected": true
+    },
+    {
+      "leafIndex": 3,
+      "treeSize": 7,
+      "hashes": [
+        "fca89f57c9f8c8eb4047a7ff9d333acf9e0f3384b20b255bceab0f216dcca267",
+        "60a53eed0de87a90c8e59427c59c46253c33a76a09502a51801300927b7e6bdc",
+        "8eae6bd3b3a07f1f75ee72a531629e6eb31e42e62f760e47de52a53c3641ef23"
+      ],
+      "root": "0b007fb915eb9b2a146f54b1c86ec53b664f8e455b7660b0b6ee13edc0d921c0",
+      "expected": true
+    },
+    {
+      "leafIndex": 4,
+      "treeSize": 7,
+      "hashes": [
+        "8f1593cb92f429d9340b9bbc1f0bb122adf8026c42a4a42142e2168931727236",
+        "676f3782f5b3a5fb4370ed49572cedc523f4a66322269c85f2af0509d17b0a4d",
+        "bdd1c5ff55b19cb6b0e7c761bf9a6ccaa27fbbfc07b74f1fabb6e911a0bd2ab3"
+      ],
+      "root": "0b007fb915eb9b2a146f54b1c86ec53b664f8e455b7660b0b6ee13edc0d921c0",
+      "expected": true
+    },
+    {
+      "leafIndex": 5,
+      "treeSize": 7,
+      "hashes": [
+        "ea9fc1a1b6e191b460d0d6306e3e870c173f39330f13cda1b70cfc72bdc398ba",
+        "676f3782f5b3a5fb4370ed49572cedc523f4a66322269c85f2af0509d17b0a4d",
+        "bdd1c5ff55b19cb6b0e7c761bf9a6ccaa27fbbfc07b74f1fabb6e911a0bd2ab3"
+      ],
+      "root": "0b007fb915eb9b2a146f54b1c86ec53b664f8e455b7660b0b6ee13edc0d921c0",
+      "expected": true
+    },
+    {
+      "leafIndex": 6,
+      "treeSize": 7,
+      "hashes": [
+        "985bb5d36b927800876871da925a7e82abe83a9ddba5882920a007a55ea2b376",
+        "bdd1c5ff55b19cb6b0e7c761bf9a6ccaa27fbbfc07b74f1fabb6e911a0bd2ab3"
+      ],
+      "root": "0b007fb915eb9b2a146f54b1c86ec53b664f8e455b7660b0b6ee13edc0d921c0",
+      "expected": true
+    }
+  ],
+  "consistency": [
+    {
+      "oldSize": 0,
+      "newSize": 7,
+      "oldRoot": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "newRoot": "0b007fb915eb9b2a146f54b1c86ec53b664f8e455b7660b0b6ee13edc0d921c0",
+      "hashes": [],
+      "expected": true
+    },
+    {
+      "oldSize": 1,
+      "newSize": 7,
+      "oldRoot": "305df59f9590c3c9ac63d2b2743c388e3792449078cebf7fb3dbe6471643b2b7",
+      "newRoot": "0b007fb915eb9b2a146f54b1c86ec53b664f8e455b7660b0b6ee13edc0d921c0",
+      "hashes": [
+        "3145c409f259b7c53e32036090ff76751025a2498ba9823ef718cac50b4e616f",
+        "bd45ff28796704d88bdac51b1df553fda59837b616d6d1cb2114dbc3b087ff69",
+        "8eae6bd3b3a07f1f75ee72a531629e6eb31e42e62f760e47de52a53c3641ef23"
+      ],
+      "expected": true
+    },
+    {
+      "oldSize": 2,
+      "newSize": 5,
+      "oldRoot": "60a53eed0de87a90c8e59427c59c46253c33a76a09502a51801300927b7e6bdc",
+      "newRoot": "00d21829a5503145348abcf712513eacf2a274211ad83e970202bb5b6d80b286",
+      "hashes": [
+        "bd45ff28796704d88bdac51b1df553fda59837b616d6d1cb2114dbc3b087ff69",
+        "ea9fc1a1b6e191b460d0d6306e3e870c173f39330f13cda1b70cfc72bdc398ba"
+      ],
+      "expected": true
+    },
+    {
+      "oldSize": 3,
+      "newSize": 7,
+      "oldRoot": "cf763a041c81ceef1578a6083f75c61bef2e0014f2a3e683a97fcfca5be7f19a",
+      "newRoot": "0b007fb915eb9b2a146f54b1c86ec53b664f8e455b7660b0b6ee13edc0d921c0",
+      "hashes": [
+        "fca89f57c9f8c8eb4047a7ff9d333acf9e0f3384b20b255bceab0f216dcca267",
+        "f76836325aec5699d8d71f8e42e9d47c5c29b08059ba296384f7ca40ad3a40ae",
+        "60a53eed0de87a90c8e59427c59c46253c33a76a09502a51801300927b7e6bdc",
+        "8eae6bd3b3a07f1f75ee72a531629e6eb31e42e62f760e47de52a53c3641ef23"
+      ],
+      "expected": true
+    },
+    {
+      "oldSize": 4,
+      "newSize": 7,
+      "oldRoot": "bdd1c5ff55b19cb6b0e7c761bf9a6ccaa27fbbfc07b74f1fabb6e911a0bd2ab3",
+      "newRoot": "0b007fb915eb9b2a146f54b1c86ec53b664f8e455b7660b0b6ee13edc0d921c0",
+      "hashes": [
+        "8eae6bd3b3a07f1f75ee72a531629e6eb31e42e62f760e47de52a53c3641ef23"
+      ],
+      "expected": true
+    },
+    {
+      "oldSize": 5,
+      "newSize": 6,
+      "oldRoot": "00d21829a5503145348abcf712513eacf2a274211ad83e970202bb5b6d80b286",
+      "newRoot": "160cf1a616e8792f9078a9665cb06520d95a33f467d0826f2310219d31383d73",
+      "hashes": [
+        "ea9fc1a1b6e191b460d0d6306e3e870c173f39330f13cda1b70cfc72bdc398ba",
+        "8f1593cb92f429d9340b9bbc1f0bb122adf8026c42a4a42142e2168931727236",
+        "bdd1c5ff55b19cb6b0e7c761bf9a6ccaa27fbbfc07b74f1fabb6e911a0bd2ab3"
+      ],
+      "expected": true
+    },
+    {
+      "oldSize": 7,
+      "newSize": 7,
+      "oldRoot": "0b007fb915eb9b2a146f54b1c86ec53b664f8e455b7660b0b6ee13edc0d921c0",
+      "newRoot": "0b007fb915eb9b2a146f54b1c86ec53b664f8e455b7660b0b6ee13edc0d921c0",
+      "hashes": [],
+      "expected": true
+    },
+    {
+      "oldSize": 3,
+      "newSize": 7,
+      "oldRoot": "cf763a041c81ceef1578a6083f75c61bef2e0014f2a3e683a97fcfca5be7f19a",
+      "newRoot": "c5d3c9af8774ee745d99c20ddb54063f1e9abddf0900db1cfb9b3608eb50df4a",
+      "hashes": [
+        "fca89f57c9f8c8eb4047a7ff9d333acf9e0f3384b20b255bceab0f216dcca267",
+        "f76836325aec5699d8d71f8e42e9d47c5c29b08059ba296384f7ca40ad3a40ae",
+        "2edcc4da09ec6712e53fa29d2e571f7996455891323073556dd0c5ab8d0264c6",
+        "8eae6bd3b3a07f1f75ee72a531629e6eb31e42e62f760e47de52a53c3641ef23"
+      ],
+      "expected": false,
+      "description": "leaf 1 rewritten after the older head was taken"
+    }
+  ]
+}