@agent-custody/receipts 0.1.2 → 0.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/README.md +3 -0
  2. package/dist/crypto.d.ts +2 -0
  3. package/dist/crypto.js +5 -1
  4. package/dist/gateway.d.ts +3 -0
  5. package/dist/gateway.js +7 -2
  6. package/docs/usage.md +4 -0
  7. package/docs/verification.md +8 -0
  8. package/package.json +5 -3
  9. package/vectors/audit.json +147 -0
  10. package/vectors/canonical.json +76 -0
  11. package/vectors/merkle.json +200 -0
  12. package/vectors/receipts.json +682 -0
package/vectors/receipts.json ADDED
@@ -0,0 +1,682 @@
1
+ {
2
+ "version": "0.2",
3
+ "generated": "2026-09-07T06:52:51.115Z",
4
+ "note": "Each case: verify `bundle` with the named keys (see `keys`) and, when `log` is not null, a copy of the log whose lines are these leaves. `expected.failing` lists the check names that must fail; `expected.ok` is true only when it is empty.",
5
+ "keys": {
6
+ "gateway": {
7
+ "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAFgGoXJDMPG4QYAWg1K/243JB4XUeZ1BHbWJROkwKcYE=\n-----END PUBLIC KEY-----\n",
8
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a"
9
+ },
10
+ "principal": {
11
+ "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAPLuZpFpCy1VgO8oenAdSqVDDN6cm52rucypEE8FeuP0=\n-----END PUBLIC KEY-----\n",
12
+ "keyid": "eb39550bcc7a2a6cb9ab46c6265c9e5eeec6ba0a98637a0f749d3d76e05f63e8"
13
+ },
14
+ "app": {
15
+ "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA3Szv0G3fDGo6ZFDEYX3j3W0j/KJDW6WMBnVRSHSSlr4=\n-----END PUBLIC KEY-----\n",
16
+ "keyid": "5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33"
17
+ },
18
+ "log": {
19
+ "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAMmJCjcmQIJApWZ4+Lzu+aeBMwgSUZH5l5J3/ZNmbmAY=\n-----END PUBLIC KEY-----\n",
20
+ "keyid": "e1ed29255a4bd710006fe9ad333514e71c705608b769029088a818f57bcf080a"
21
+ }
22
+ },
23
+ "cases": [
24
+ {
25
+ "name": "gateway-executed",
26
+ "description": "An in-policy refund through the gateway: delegation attested, facts observed, executed. Every check passes with the log.",
27
+ "bundle": {
28
+ "envelope": {
29
+ "payloadType": "application/vnd.in-toto+json",
30
+ "payload": "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",
31
+ "signatures": [
32
+ {
33
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
34
+ "sig": "naZ4h5W1szHPDcckU9Lr2gPyZGu6+juHPHr0x/Xj1h98qriYCUtJ3CIuMsIbTpu25tENvH6bdKh5Ol3csVpsBQ=="
35
+ }
36
+ ]
37
+ },
38
+ "treeHead": {
39
+ "payloadType": "application/vnd.agent-custody.treehead+json",
40
+ "payload": "eyJyb290SGFzaCI6ImNmMjNlYjgwMTQ2MjY1NGYyMzVkYzVmYjM2ZmRmOWI0YTlmMTk4NGZjZDgwZGYzYWE5NTFkOWNlODIzZmNiYzMiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjA4M1oiLCJ0cmVlU2l6ZSI6MX0=",
41
+ "signatures": [
42
+ {
43
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
44
+ "sig": "NoxZSpufnGtoUfqOJh7yEiSPOsf+UlRmoWwH6aVztW5B4ZFacP/QJUpQ4sQMBnIHVRAIqN9sGTfUDvA8jbfTCQ=="
45
+ }
46
+ ]
47
+ },
48
+ "inclusion": {
49
+ "leafIndex": 0,
50
+ "treeSize": 1,
51
+ "hashes": []
52
+ }
53
+ },
54
+ "issuerKeys": [
55
+ "gateway"
56
+ ],
57
+ "principalKeys": [
58
+ "principal"
59
+ ],
60
+ "logKeys": [],
61
+ "log": [
62
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"naZ4h5W1szHPDcckU9Lr2gPyZGu6+juHPHr0x/Xj1h98qriYCUtJ3CIuMsIbTpu25tENvH6bdKh5Ol3csVpsBQ==\"}]}",
63
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"ybG6qougPOAWh5ORfAbA/5K7At4K7uTZtEZszzuTGIn1LYH2CZcAQBXRyoSdmIdLpqq/Rp/sbFYsuDq5IVuDAA==\"}]}"
64
+ ],
65
+ "expected": {
66
+ "ok": true,
67
+ "failing": []
68
+ }
69
+ },
70
+ {
71
+ "name": "gateway-denied",
72
+ "description": "An over-limit refund denied by policy. The receipt exists, execution is denied, and every check passes.",
73
+ "bundle": {
74
+ "envelope": {
75
+ "payloadType": "application/vnd.in-toto+json",
76
+ "payload": "eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJwcmVkaWNhdGUiOnsiYWdlbnQiOnsiaWQiOiJzdXBwb3J0LWFnZW50IiwicHJvdmVuYW5jZSI6ImF0dGVzdGVkIn0sImRlbGVnYXRpb24iOnsiZW52ZWxvcGUiOnsicGF5bG9hZCI6ImV5SmhaMlZ1ZENJNkluTjFjSEJ2Y25RdFlXZGxiblFpTENKbGVIQnBjbVZ6UVhRaU9pSXlNREkyTFRBNUxUQTNWREEzT2pVeU9qVXdMamt4TlZvaUxDSnBjM04xWldSQmRDSTZJakl3TWpZdE1Ea3RNRGRVTURZNk5USTZORGt1T1RFMVdpSXNJbkJ5YVc1amFYQmhiQ0k2SW5WelpYSmZORFUySWl3aWMyTnZjR1Z6SWpwYkltTjFjM1J2YldWeUxteHZiMnQxY0NJc0luTjBjbWx3WlM1eVpXWjFibVFpWFN3aWRtVnljMmx2YmlJNklqQXVNU0o5IiwicGF5bG9hZFR5cGUiOiJhcHBsaWNhdGlvbi92bmQuYWdlbnQtY3VzdG9keS5kZWxlZ2F0aW9uK2pzb24iLCJzaWduYXR1cmVzIjpbeyJrZXlpZCI6ImViMzk1NTBiY2M3YTJhNmNiOWFiNDZjNjI2NWM5ZTVlZWVjNmJhMGE5ODYzN2EwZjc0OWQzZDc2ZTA1ZjYzZTgiLCJzaWciOiJ0NFdpNTk0ZitxM3NDa3h0ZDdSZ1NDQldrNUtIdFVKZWo2RGVxNk1CYTI1NVFzOC95ZHRMNVlPS0tFMytYditCRDZCSDREdmpFYy9QS2d0NVJzZFRCZz09In1dfSwicHJvdmVuYW5jZSI6ImF0dGVzdGVkIn0sImV4ZWN1dGlvbiI6eyJwcm92ZW5hbmNlIjoib2JzZXJ2ZWQiLCJyZWFzb24iOiJubyBwZXJtaXQgcG9saWN5IG1hdGNoZWQiLCJzdGF0dXMiOiJkZW5pZWQifSwiZmFjdHMiOnsiY3VzdG9tZXIiOnsiYXJncyI6eyJjdXN0b21lcl9pZCI6ImN1c3RfMTIzIn0sInByb3ZlbmFuY2UiOiJvYnNlcnZlZCIsInJlc3VsdERpZ2VzdCI6Ijk1N2VhNjI2MDI4OTA4YWQ2N2IwMjQ1NDYxYzUzYWZhMzhjMWQ1ZjdlZDQzOTNmYjM0NjFiNDM3NWIyZDQwOWQiLCJ0b29sIjoiY3VzdG9tZXIubG9va3VwIiwidmFsdWUiOnsiZW1haWwiOiJhbGV4QGV4YW1wbGUuY29tIiwiaWQiOiJjdXN0XzEyMyIsInZlcmlmaWVkIjp0cnVlfX19LCJpc3N1ZXIiOnsia2V5aWQiOiI5ZjAzN2Q4ZWIyM2I3MzBjMDZiNDZjM2EzZjJmZDZjZjg0NDk2NGFlZWEyMjA0ZGM4YjA4YzEyYWM4YTdhMjNhIiwia2luZCI6ImdhdGV3YXkiLCJ2ZXJzaW9uIjoiMC4xLjAifSwibW9kZWwiOnsiaWQiOm51bGwsInByb3ZlbmFuY2UiOiJjbGFpbWVkIn0sInBvbGljeSI6eyJkZWNpc2lvbiI6ImRlbnkiLCJlcnJvcnMiOltdLCJwb2xpY3lEaWdlc3QiOiJiYTRlNDQ2MWZmYzQ2NTliYWIyOTg0ZjIwMDZjZjE2NWVjNTVjZGMxMDU5YTRiYTAwZDNhMjY4NmM5YWJmMjUzIiwicHJvdmVuYW5jZSI6Im9ic2VydmVkIiwicmVhc29ucyI6W119LCJwcmluY2lwYWwiOnsiaWQiOiJ1c2VyXzQ1NiIsImtleWlkIjoiZWIzOTU1MGJjYzdhMmE2Y2I5YWI0NmM2MjY1YzllNWVlZWM2YmEwYTk4NjM3YTBmNzQ5ZDNkNzZlMDVmNjNlOCIsInByb3ZlbmFuY2UiOiJhdHRlc3RlZCJ9LCJyZWNlaXB0SWQiOiIwNzBmMWQzYy05MTRlLTQ4ZjctYjE4NC0zZDI2YWVjMzMzNTIiLCJyZXF1ZXN0Ijp7ImFyZ3MiOnsiYW1vdW50Ijo1MDAwMDAwLCJjdXN0b21lcl9pZCI6ImN1c3RfMTIzIn0sImFyZ3NEaWdlc3QiOiJhOTE0NTkxMTMxMDRmNjhlZTExOTMxNWVmMzJlYTE0N2FlNzQzNjQ0MmE5NGFiMmFiNjkyZDQ4ZmQyMDAyYjhhIiwicHJvdmVuYW5jZSI6ImNsYWltZWQifSwic2Vzc2lvbiI6eyJpZCI6bnVsbCwicHJvdmVuYW5jZSI6ImNsYWltZWQiLCJ0b29sVXNlSWQiOm51bGx9LCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjA4M1oiLCJ0b29sIjp7Im5hbWUiOiJzdHJpcGUucmVmdW5kIiwicHJvdmVuYW5jZSI6Im9ic2VydmVkIn19LCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9hZ2VudC1jdXN0b2R5LmRldi9yZWNlaXB0L3YwLjIiLCJzdWJqZWN0IjpbeyJkaWdlc3QiOnsic2hhMjU2IjoiYTkxNDU5MTEzMTA0ZjY4ZWUxMTkzMTVlZjMyZWExNDdhZTc0MzY0NDJhOTRhYjJhYjY5MmQ0OGZkMjAwMmI4YSJ9LCJuYW1lIjoidG9vbC1jYWxsOnN0cmlwZS5yZWZ1bmQ6MDcwZjFkM2MtOTE0ZS00OGY3LWIxODQtM2QyNmFlYzMzMzUyIn1dfQ==",
77
+ "signatures": [
78
+ {
79
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
80
+ "sig": "ybG6qougPOAWh5ORfAbA/5K7At4K7uTZtEZszzuTGIn1LYH2CZcAQBXRyoSdmIdLpqq/Rp/sbFYsuDq5IVuDAA=="
81
+ }
82
+ ]
83
+ },
84
+ "treeHead": {
85
+ "payloadType": "application/vnd.agent-custody.treehead+json",
86
+ "payload": "eyJyb290SGFzaCI6IjBkYWQ1ZTgxYjFlZWM2MjE3NGM1YTk0YjJiYjlhNjVkYWY4YTcyNDA5NDFkZWE5MDQyMzA2Zjk3ZjI5NTZiMWYiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjA4NFoiLCJ0cmVlU2l6ZSI6Mn0=",
87
+ "signatures": [
88
+ {
89
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
90
+ "sig": "PbzduPr2zfi9HHgMu1vMSIlsRPZuT7wO+VZEIV+Yi73vxFXD6E4QFP6FOb9Vkosc9qjNoX6fJIbAWmWAUIctCA=="
91
+ }
92
+ ]
93
+ },
94
+ "inclusion": {
95
+ "leafIndex": 1,
96
+ "treeSize": 2,
97
+ "hashes": [
98
+ "cf23eb801462654f235dc5fb36fdf9b4a9f1984fcd80df3aa951d9ce823fcbc3"
99
+ ]
100
+ }
101
+ },
102
+ "issuerKeys": [
103
+ "gateway"
104
+ ],
105
+ "principalKeys": [
106
+ "principal"
107
+ ],
108
+ "logKeys": [],
109
+ "log": [
110
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"naZ4h5W1szHPDcckU9Lr2gPyZGu6+juHPHr0x/Xj1h98qriYCUtJ3CIuMsIbTpu25tENvH6bdKh5Ol3csVpsBQ==\"}]}",
111
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"ybG6qougPOAWh5ORfAbA/5K7At4K7uTZtEZszzuTGIn1LYH2CZcAQBXRyoSdmIdLpqq/Rp/sbFYsuDq5IVuDAA==\"}]}"
112
+ ],
113
+ "expected": {
114
+ "ok": true,
115
+ "failing": []
116
+ }
117
+ },
118
+ {
119
+ "name": "gateway-executed-no-log-copy",
120
+ "description": "The same executed receipt verified without a copy of the log: inclusion still proven against the signed tree head, the log-file check simply absent.",
121
+ "bundle": {
122
+ "envelope": {
123
+ "payloadType": "application/vnd.in-toto+json",
124
+ "payload": "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",
125
+ "signatures": [
126
+ {
127
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
128
+ "sig": "naZ4h5W1szHPDcckU9Lr2gPyZGu6+juHPHr0x/Xj1h98qriYCUtJ3CIuMsIbTpu25tENvH6bdKh5Ol3csVpsBQ=="
129
+ }
130
+ ]
131
+ },
132
+ "treeHead": {
133
+ "payloadType": "application/vnd.agent-custody.treehead+json",
134
+ "payload": "eyJyb290SGFzaCI6ImNmMjNlYjgwMTQ2MjY1NGYyMzVkYzVmYjM2ZmRmOWI0YTlmMTk4NGZjZDgwZGYzYWE5NTFkOWNlODIzZmNiYzMiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjA4M1oiLCJ0cmVlU2l6ZSI6MX0=",
135
+ "signatures": [
136
+ {
137
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
138
+ "sig": "NoxZSpufnGtoUfqOJh7yEiSPOsf+UlRmoWwH6aVztW5B4ZFacP/QJUpQ4sQMBnIHVRAIqN9sGTfUDvA8jbfTCQ=="
139
+ }
140
+ ]
141
+ },
142
+ "inclusion": {
143
+ "leafIndex": 0,
144
+ "treeSize": 1,
145
+ "hashes": []
146
+ }
147
+ },
148
+ "issuerKeys": [
149
+ "gateway"
150
+ ],
151
+ "principalKeys": [
152
+ "principal"
153
+ ],
154
+ "logKeys": [],
155
+ "log": null,
156
+ "expected": {
157
+ "ok": true,
158
+ "failing": []
159
+ }
160
+ },
161
+ {
162
+ "name": "wrong-issuer-key",
163
+ "description": "Verified against the principal's key as if it were the issuer's. The signature check fails first and nothing else is decided.",
164
+ "bundle": {
165
+ "envelope": {
166
+ "payloadType": "application/vnd.in-toto+json",
167
+ "payload": "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",
168
+ "signatures": [
169
+ {
170
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
171
+ "sig": "naZ4h5W1szHPDcckU9Lr2gPyZGu6+juHPHr0x/Xj1h98qriYCUtJ3CIuMsIbTpu25tENvH6bdKh5Ol3csVpsBQ=="
172
+ }
173
+ ]
174
+ },
175
+ "treeHead": {
176
+ "payloadType": "application/vnd.agent-custody.treehead+json",
177
+ "payload": "eyJyb290SGFzaCI6ImNmMjNlYjgwMTQ2MjY1NGYyMzVkYzVmYjM2ZmRmOWI0YTlmMTk4NGZjZDgwZGYzYWE5NTFkOWNlODIzZmNiYzMiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjA4M1oiLCJ0cmVlU2l6ZSI6MX0=",
178
+ "signatures": [
179
+ {
180
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
181
+ "sig": "NoxZSpufnGtoUfqOJh7yEiSPOsf+UlRmoWwH6aVztW5B4ZFacP/QJUpQ4sQMBnIHVRAIqN9sGTfUDvA8jbfTCQ=="
182
+ }
183
+ ]
184
+ },
185
+ "inclusion": {
186
+ "leafIndex": 0,
187
+ "treeSize": 1,
188
+ "hashes": []
189
+ }
190
+ },
191
+ "issuerKeys": [
192
+ "principal"
193
+ ],
194
+ "principalKeys": [
195
+ "principal"
196
+ ],
197
+ "logKeys": [],
198
+ "log": [
199
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"naZ4h5W1szHPDcckU9Lr2gPyZGu6+juHPHr0x/Xj1h98qriYCUtJ3CIuMsIbTpu25tENvH6bdKh5Ol3csVpsBQ==\"}]}",
200
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"ybG6qougPOAWh5ORfAbA/5K7At4K7uTZtEZszzuTGIn1LYH2CZcAQBXRyoSdmIdLpqq/Rp/sbFYsuDq5IVuDAA==\"}]}"
201
+ ],
202
+ "expected": {
203
+ "ok": false,
204
+ "failing": [
205
+ "receipt signature (issuer key)"
206
+ ]
207
+ }
208
+ },
209
+ {
210
+ "name": "tampered-payload",
211
+ "description": "One character of the base64 payload changed. The signature no longer verifies.",
212
+ "bundle": {
213
+ "envelope": {
214
+ "payloadType": "application/vnd.in-toto+json",
215
+ "payload": "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",
216
+ "signatures": [
217
+ {
218
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
219
+ "sig": "naZ4h5W1szHPDcckU9Lr2gPyZGu6+juHPHr0x/Xj1h98qriYCUtJ3CIuMsIbTpu25tENvH6bdKh5Ol3csVpsBQ=="
220
+ }
221
+ ]
222
+ },
223
+ "treeHead": {
224
+ "payloadType": "application/vnd.agent-custody.treehead+json",
225
+ "payload": "eyJyb290SGFzaCI6ImNmMjNlYjgwMTQ2MjY1NGYyMzVkYzVmYjM2ZmRmOWI0YTlmMTk4NGZjZDgwZGYzYWE5NTFkOWNlODIzZmNiYzMiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjA4M1oiLCJ0cmVlU2l6ZSI6MX0=",
226
+ "signatures": [
227
+ {
228
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
229
+ "sig": "NoxZSpufnGtoUfqOJh7yEiSPOsf+UlRmoWwH6aVztW5B4ZFacP/QJUpQ4sQMBnIHVRAIqN9sGTfUDvA8jbfTCQ=="
230
+ }
231
+ ]
232
+ },
233
+ "inclusion": {
234
+ "leafIndex": 0,
235
+ "treeSize": 1,
236
+ "hashes": []
237
+ }
238
+ },
239
+ "issuerKeys": [
240
+ "gateway"
241
+ ],
242
+ "principalKeys": [
243
+ "principal"
244
+ ],
245
+ "logKeys": [],
246
+ "log": [
247
+ "{\"payload\":\"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJwcmVkaWNhdGUiOnsiYWdlbnQiOnsiaWQiOiJzdXBwb3J0LWFnZW50IiwicHJvdmVuYW5jZSI6ImF0dGVzdGVkIn0sImRlbGVnYXRpb24iOnsiZW52ZWxvcGUiOnsicGF5bG9hZCI6ImV5SmhaMlZ1ZENJNkluTjFjSEJ2Y25RdFlXZGxiblFpTENKbGVIQnBjbVZ6UVhRaU9pSXlNREkyTFRBNUxUQTNWREEzT2pVeU9qVXdMamt4TlZvaUxDSnBjM04xWldSQmRDSTZJakl3TWpZdE1Ea3RNRGRVTURZNk5USTZORGt1T1RFMVdpSXNJbkJ5YVc1amFYQmhiQ0k2SW5WelpYSmZORFUySWl3aWMyTnZjR1Z6SWpwYkltTjFjM1J2YldWeUxteHZiMnQxY0NJc0luTjBjbWx3WlM1eVpXWjFibVFpWFN3aWRtVnljMmx2YmlJNklqQXVNU0o5IiwicGF5bG9hZFR5cGUiOiJhcHBsaWNhdGlvbi92bmQuYWdlbnQtY3VzdG9keS5kZWxlZ2F0aW9uK2pzb24iLCJzaWduYXR1cmVzIjpbeyJrZXlpZCI6ImViMzk1NTBiY2M3YTJhNmNiOWFiNDZjNjI2NWM5ZTVlZWVjNmJhMGE5ODYzN2EwZjc0OWQzZDc2ZTA1ZjYzZTgiLCJzaWciOiJ0NFdpNTk0ZitxM3NDa3h0ZDdSZ1NDQldrNUtIdFVKZWo2RGVxNk1CYTI1NVFzOC95ZHRMNVlPS0tFMytYditCRDZCSDREdmpFYy9QS2d0NVJzZFRCZz09In1dfSwicHJvdmVuYW5jZSI6ImF0dGVzdGVkIn0sImV4ZWN1dGlvbiI6eyJwcm92ZW5hbmNlIjoib2JzZXJ2ZWQiLCJyZXN1bHQiOnsiY29udGVudCI6W3sidGV4dCI6IntcInJlZnVuZF9pZFwiOlwicmVfN2E4OTQ3MTJcIixcImN1c3RvbWVyX2lkXCI6XCJjdXN0XzEyM1wiLFwiYW1vdW50XCI6NTAwMDAsXCJzdGF0dXNcIjpcInN1Y2NlZWRlZFwifSIsInR5cGUiOiJ0ZXh0In1dfSwicmVzdWx0RGlnZXN0IjoiYjliY2Q0NzEzNTM0MzhjMWJlYjM5MWVlYWRmNzM4YWJjZDg4YzdhN2Q0ZWU1MzM2OTQyMDQ2ZDhjMDI3YjcxNSIsInN0YXR1cyI6ImV4ZWN1dGVkIn0sImZhY3RzIjp7ImN1c3RvbWVyIjp7ImFyZ3MiOnsiY3VzdG9tZXJfaWQiOiJjdXN0XzEyMyJ9LCJwcm92ZW5hbmNlIjoib2JzZXJ2ZWQiLCJyZXN1bHREaWdlc3QiOiI5NTdlYTYyNjAyODkwOGFkNjdiMDI0NTQ2MWM1M2FmYTM4YzFkNWY3ZWQ0MzkzZmIzNDYxYjQzNzViMmQ0MDlkIiwidG9vbCI6ImN1c3RvbWVyLmxvb2t1cCIsInZhbHVlIjp7ImVtYWlsIjoiYWxleEBleGFtcGxlLmNvbSIsImlkIjoiY3VzdF8xMjMiLCJ2ZXJpZmllZCI6dHJ1ZX19fSwiaXNzdWVyIjp7ImtleWlkIjoiOWYwMzdkOGViMjNiNzMwYzA2YjQ2YzNhM2YyZmQ2Y2Y4NDQ5NjRhZWVhMjIwNGRjOGIwOGMxMmFjOGE3YTIzYSIsImtpbmQiOiJnYXRld2F5IiwidmVyc2lvbiI6IjAuMS4wIn0sIm1vZGVsIjp7ImlkIjoidmVjdG9yLW1vZGVsIiwicHJvdmVuYW5jZSI6ImNsYWltZWQifSwicG9saWN5Ijp7ImRlY2lzaW9uIjoiYWxsb3ciLCJlcnJvcnMiOltdLCJwb2xpY3lEaWdlc3QiOiJiYTRlNDQ2MWZmYzQ2NTliYWIyOTg0ZjIwMDZjZjE2NWVjNTVjZGMxMDU5YTRiYTAwZDNhMjY4NmM5YWJmMjUzIiwicHJvdmVuYW5jZSI6Im9ic2VydmVkIiwicmVhc29ucyI6WyJwb2xpY3kxIl19LCJwcmluY2lwYWwiOnsiaWQiOiJ1c2VyXzQ1NiIsImtleWlkIjoiZWIzOTU1MGJjYzdhMmE2Y2I5YWI0NmM2MjY1YzllNWVlZWM2YmEwYTk4NjM3YTBmNzQ5ZDNkNzZlMDVmNjNlOCIsInByb3ZlbmFuY2UiOiJhdHRlc3RlZCJ9LCJyZWNlaXB0SWQiOiIyYzAxY2U5NS1mMjJjLTRlNGItYjIwZS0yMTFlNjE2YmVjNTIiLCJyZXF1ZXN0Ijp7ImFyZ3MiOnsiYW1vdW50Ijo1MDAwMCwiY3VzdG9tZXJfaWQiOiJjdXN0XzEyMyJ9LCJhcmdzRGlnZXN0IjoiMzNmYzViYTlmMzU5Yzg2NjQ2MmYyYmNmODRjOTg1MjJhMzFlMzllMzVhOGVkYzIzOTZiOTBkMDFjYmRmM2FmNiIsInByb3ZlbmFuY2UiOiJjbGFpbWVkIn0sInNlc3Npb24iOnsiaWQiOm51bGwsInByb3ZlbmFuY2UiOiJjbGFpbWVkIiwidG9vbFVzZUlkIjpudWxsfSwidGltZXN0YW1wIjoiMjAyNi0wOS0wN1QwNjo1Mjo1MS4wNjBaIiwidG9vbCI6eyJuYW1lIjoic3RyaXBlLnJlZnVuZCIsInByb3ZlbmFuY2UiOiJvYnNlcnZlZCJ9fSwicHJlZGljYXRlVHlwZSI6Imh0dHBzOi8vYWdlbnQtY3VzdG9keS5kZXYvcmVjZWlwdC92MC4yIiwic3ViamVjdCI6W3siZGlnZXN0Ijp7InNoYTI1NiI6IjMzZmM1YmE5ZjM1OWM4NjY0NjJmMmJjZjg0Yzk4NTIyYTMxZTM5ZTM1YThlZGMyMzk2YjkwZDAxY2JkZjNhZjYifSwibmFtZSI6InRvb2wtY2FsbDpzdHJpcGUucmVmdW5kOjJjMDFjZTk1LWYyMmMtNGU0Yi1iMjBlLTIxMWU2MTZiZWM1MiJ9XX0=\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"naZ4h5W1szHPDcckU9Lr2gPyZGu6+juHPHr0x/Xj1h98qriYCUtJ3CIuMsIbTpu25tENvH6bdKh5Ol3csVpsBQ==\"}]}",
248
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"ybG6qougPOAWh5ORfAbA/5K7At4K7uTZtEZszzuTGIn1LYH2CZcAQBXRyoSdmIdLpqq/Rp/sbFYsuDq5IVuDAA==\"}]}"
249
+ ],
250
+ "expected": {
251
+ "ok": false,
252
+ "failing": [
253
+ "receipt signature (issuer key)"
254
+ ]
255
+ }
256
+ },
257
+ {
258
+ "name": "resigned-tool-out-of-scope",
259
+ "description": "Predicate edited to name a tool outside the grant, then re-signed with the real gateway key. The signature passes; the scope check fails; the log no longer contains this leaf.",
260
+ "bundle": {
261
+ "envelope": {
262
+ "payloadType": "application/vnd.in-toto+json",
263
+ "payload": "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",
264
+ "signatures": [
265
+ {
266
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
267
+ "sig": "xgUC8zGl/0ak1JcROa+/6/nsd2GztwAW9IGEqmMExGCZgExr/zwuYnmVA1yTfK+zD/4xJPhIVXTatWQk6MdADg=="
268
+ }
269
+ ]
270
+ },
271
+ "treeHead": {
272
+ "payloadType": "application/vnd.agent-custody.treehead+json",
273
+ "payload": "eyJyb290SGFzaCI6ImNmMjNlYjgwMTQ2MjY1NGYyMzVkYzVmYjM2ZmRmOWI0YTlmMTk4NGZjZDgwZGYzYWE5NTFkOWNlODIzZmNiYzMiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjA4M1oiLCJ0cmVlU2l6ZSI6MX0=",
274
+ "signatures": [
275
+ {
276
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
277
+ "sig": "NoxZSpufnGtoUfqOJh7yEiSPOsf+UlRmoWwH6aVztW5B4ZFacP/QJUpQ4sQMBnIHVRAIqN9sGTfUDvA8jbfTCQ=="
278
+ }
279
+ ]
280
+ },
281
+ "inclusion": {
282
+ "leafIndex": 0,
283
+ "treeSize": 1,
284
+ "hashes": []
285
+ }
286
+ },
287
+ "issuerKeys": [
288
+ "gateway"
289
+ ],
290
+ "principalKeys": [
291
+ "principal"
292
+ ],
293
+ "logKeys": [],
294
+ "log": [
295
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"naZ4h5W1szHPDcckU9Lr2gPyZGu6+juHPHr0x/Xj1h98qriYCUtJ3CIuMsIbTpu25tENvH6bdKh5Ol3csVpsBQ==\"}]}",
296
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"ybG6qougPOAWh5ORfAbA/5K7At4K7uTZtEZszzuTGIn1LYH2CZcAQBXRyoSdmIdLpqq/Rp/sbFYsuDq5IVuDAA==\"}]}"
297
+ ],
298
+ "expected": {
299
+ "ok": false,
300
+ "failing": [
301
+ "executed tool within delegated scope",
302
+ "log inclusion proof"
303
+ ]
304
+ }
305
+ },
306
+ {
307
+ "name": "resigned-policy-inconsistent",
308
+ "description": "Predicate edited so the policy says deny while execution says executed, re-signed with the gateway key.",
309
+ "bundle": {
310
+ "envelope": {
311
+ "payloadType": "application/vnd.in-toto+json",
312
+ "payload": "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",
313
+ "signatures": [
314
+ {
315
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
316
+ "sig": "EnR7z9JNnhAwezcW0QSTuHlvkJPPO+e+/pxgelMEvenjn4IsFjLaBCA76FVF09iixI9vdHv8tIWAsMW529rCAQ=="
317
+ }
318
+ ]
319
+ },
320
+ "treeHead": {
321
+ "payloadType": "application/vnd.agent-custody.treehead+json",
322
+ "payload": "eyJyb290SGFzaCI6ImNmMjNlYjgwMTQ2MjY1NGYyMzVkYzVmYjM2ZmRmOWI0YTlmMTk4NGZjZDgwZGYzYWE5NTFkOWNlODIzZmNiYzMiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjA4M1oiLCJ0cmVlU2l6ZSI6MX0=",
323
+ "signatures": [
324
+ {
325
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
326
+ "sig": "NoxZSpufnGtoUfqOJh7yEiSPOsf+UlRmoWwH6aVztW5B4ZFacP/QJUpQ4sQMBnIHVRAIqN9sGTfUDvA8jbfTCQ=="
327
+ }
328
+ ]
329
+ },
330
+ "inclusion": {
331
+ "leafIndex": 0,
332
+ "treeSize": 1,
333
+ "hashes": []
334
+ }
335
+ },
336
+ "issuerKeys": [
337
+ "gateway"
338
+ ],
339
+ "principalKeys": [
340
+ "principal"
341
+ ],
342
+ "logKeys": [],
343
+ "log": [
344
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"naZ4h5W1szHPDcckU9Lr2gPyZGu6+juHPHr0x/Xj1h98qriYCUtJ3CIuMsIbTpu25tENvH6bdKh5Ol3csVpsBQ==\"}]}",
345
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"ybG6qougPOAWh5ORfAbA/5K7At4K7uTZtEZszzuTGIn1LYH2CZcAQBXRyoSdmIdLpqq/Rp/sbFYsuDq5IVuDAA==\"}]}"
346
+ ],
347
+ "expected": {
348
+ "ok": false,
349
+ "failing": [
350
+ "policy decision consistent with execution",
351
+ "log inclusion proof"
352
+ ]
353
+ }
354
+ },
355
+ {
356
+ "name": "resigned-args-digest",
357
+ "description": "Request args edited without updating the digest, re-signed with the gateway key.",
358
+ "bundle": {
359
+ "envelope": {
360
+ "payloadType": "application/vnd.in-toto+json",
361
+ "payload": "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",
362
+ "signatures": [
363
+ {
364
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
365
+ "sig": "53zMvfo+tVFik/bG8wasRuCpiXJ2iMyepluh8mbvhFPMrQ2mFPVqDonTQcNsdKKhlJ/PWxaH9b4w1rrKOwUWCw=="
366
+ }
367
+ ]
368
+ },
369
+ "treeHead": {
370
+ "payloadType": "application/vnd.agent-custody.treehead+json",
371
+ "payload": "eyJyb290SGFzaCI6ImNmMjNlYjgwMTQ2MjY1NGYyMzVkYzVmYjM2ZmRmOWI0YTlmMTk4NGZjZDgwZGYzYWE5NTFkOWNlODIzZmNiYzMiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjA4M1oiLCJ0cmVlU2l6ZSI6MX0=",
372
+ "signatures": [
373
+ {
374
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
375
+ "sig": "NoxZSpufnGtoUfqOJh7yEiSPOsf+UlRmoWwH6aVztW5B4ZFacP/QJUpQ4sQMBnIHVRAIqN9sGTfUDvA8jbfTCQ=="
376
+ }
377
+ ]
378
+ },
379
+ "inclusion": {
380
+ "leafIndex": 0,
381
+ "treeSize": 1,
382
+ "hashes": []
383
+ }
384
+ },
385
+ "issuerKeys": [
386
+ "gateway"
387
+ ],
388
+ "principalKeys": [
389
+ "principal"
390
+ ],
391
+ "logKeys": [],
392
+ "log": [
393
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"naZ4h5W1szHPDcckU9Lr2gPyZGu6+juHPHr0x/Xj1h98qriYCUtJ3CIuMsIbTpu25tENvH6bdKh5Ol3csVpsBQ==\"}]}",
394
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"ybG6qougPOAWh5ORfAbA/5K7At4K7uTZtEZszzuTGIn1LYH2CZcAQBXRyoSdmIdLpqq/Rp/sbFYsuDq5IVuDAA==\"}]}"
395
+ ],
396
+ "expected": {
397
+ "ok": false,
398
+ "failing": [
399
+ "request args digest",
400
+ "log inclusion proof"
401
+ ]
402
+ }
403
+ },
404
+ {
405
+ "name": "inclusion-proof-wrong-index",
406
+ "description": "The inclusion proof's leaf index changed. The tree head still verifies; the proof does not.",
407
+ "bundle": {
408
+ "envelope": {
409
+ "payloadType": "application/vnd.in-toto+json",
410
+ "payload": "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",
411
+ "signatures": [
412
+ {
413
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
414
+ "sig": "naZ4h5W1szHPDcckU9Lr2gPyZGu6+juHPHr0x/Xj1h98qriYCUtJ3CIuMsIbTpu25tENvH6bdKh5Ol3csVpsBQ=="
415
+ }
416
+ ]
417
+ },
418
+ "treeHead": {
419
+ "payloadType": "application/vnd.agent-custody.treehead+json",
420
+ "payload": "eyJyb290SGFzaCI6ImNmMjNlYjgwMTQ2MjY1NGYyMzVkYzVmYjM2ZmRmOWI0YTlmMTk4NGZjZDgwZGYzYWE5NTFkOWNlODIzZmNiYzMiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjA4M1oiLCJ0cmVlU2l6ZSI6MX0=",
421
+ "signatures": [
422
+ {
423
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
424
+ "sig": "NoxZSpufnGtoUfqOJh7yEiSPOsf+UlRmoWwH6aVztW5B4ZFacP/QJUpQ4sQMBnIHVRAIqN9sGTfUDvA8jbfTCQ=="
425
+ }
426
+ ]
427
+ },
428
+ "inclusion": {
429
+ "leafIndex": 1,
430
+ "treeSize": 1,
431
+ "hashes": []
432
+ }
433
+ },
434
+ "issuerKeys": [
435
+ "gateway"
436
+ ],
437
+ "principalKeys": [
438
+ "principal"
439
+ ],
440
+ "logKeys": [],
441
+ "log": [
442
+ "{\"payload\":\"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJwcmVkaWNhdGUiOnsiYWdlbnQiOnsiaWQiOiJzdXBwb3J0LWFnZW50IiwicHJvdmVuYW5jZSI6ImF0dGVzdGVkIn0sImRlbGVnYXRpb24iOnsiZW52ZWxvcGUiOnsicGF5bG9hZCI6ImV5SmhaMlZ1ZENJNkluTjFjSEJ2Y25RdFlXZGxiblFpTENKbGVIQnBjbVZ6UVhRaU9pSXlNREkyTFRBNUxUQTNWREEzT2pVeU9qVXdMamt4TlZvaUxDSnBjM04xWldSQmRDSTZJakl3TWpZdE1Ea3RNRGRVTURZNk5USTZORGt1T1RFMVdpSXNJbkJ5YVc1amFYQmhiQ0k2SW5WelpYSmZORFUySWl3aWMyTnZjR1Z6SWpwYkltTjFjM1J2YldWeUxteHZiMnQxY0NJc0luTjBjbWx3WlM1eVpXWjFibVFpWFN3aWRtVnljMmx2YmlJNklqQXVNU0o5IiwicGF5bG9hZFR5cGUiOiJhcHBsaWNhdGlvbi92bmQuYWdlbnQtY3VzdG9keS5kZWxlZ2F0aW9uK2pzb24iLCJzaWduYXR1cmVzIjpbeyJrZXlpZCI6ImViMzk1NTBiY2M3YTJhNmNiOWFiNDZjNjI2NWM5ZTVlZWVjNmJhMGE5ODYzN2EwZjc0OWQzZDc2ZTA1ZjYzZTgiLCJzaWciOiJ0NFdpNTk0ZitxM3NDa3h0ZDdSZ1NDQldrNUtIdFVKZWo2RGVxNk1CYTI1NVFzOC95ZHRMNVlPS0tFMytYditCRDZCSDREdmpFYy9QS2d0NVJzZFRCZz09In1dfSwicHJvdmVuYW5jZSI6ImF0dGVzdGVkIn0sImV4ZWN1dGlvbiI6eyJwcm92ZW5hbmNlIjoib2JzZXJ2ZWQiLCJyZXN1bHQiOnsiY29udGVudCI6W3sidGV4dCI6IntcInJlZnVuZF9pZFwiOlwicmVfN2E4OTQ3MTJcIixcImN1c3RvbWVyX2lkXCI6XCJjdXN0XzEyM1wiLFwiYW1vdW50XCI6NTAwMDAsXCJzdGF0dXNcIjpcInN1Y2NlZWRlZFwifSIsInR5cGUiOiJ0ZXh0In1dfSwicmVzdWx0RGlnZXN0IjoiYjliY2Q0NzEzNTM0MzhjMWJlYjM5MWVlYWRmNzM4YWJjZDg4YzdhN2Q0ZWU1MzM2OTQyMDQ2ZDhjMDI3YjcxNSIsInN0YXR1cyI6ImV4ZWN1dGVkIn0sImZhY3RzIjp7ImN1c3RvbWVyIjp7ImFyZ3MiOnsiY3VzdG9tZXJfaWQiOiJjdXN0XzEyMyJ9LCJwcm92ZW5hbmNlIjoib2JzZXJ2ZWQiLCJyZXN1bHREaWdlc3QiOiI5NTdlYTYyNjAyODkwOGFkNjdiMDI0NTQ2MWM1M2FmYTM4YzFkNWY3ZWQ0MzkzZmIzNDYxYjQzNzViMmQ0MDlkIiwidG9vbCI6ImN1c3RvbWVyLmxvb2t1cCIsInZhbHVlIjp7ImVtYWlsIjoiYWxleEBleGFtcGxlLmNvbSIsImlkIjoiY3VzdF8xMjMiLCJ2ZXJpZmllZCI6dHJ1ZX19fSwiaXNzdWVyIjp7ImtleWlkIjoiOWYwMzdkOGViMjNiNzMwYzA2YjQ2YzNhM2YyZmQ2Y2Y4NDQ5NjRhZWVhMjIwNGRjOGIwOGMxMmFjOGE3YTIzYSIsImtpbmQiOiJnYXRld2F5IiwidmVyc2lvbiI6IjAuMS4wIn0sIm1vZGVsIjp7ImlkIjoidmVjdG9yLW1vZGVsIiwicHJvdmVuYW5jZSI6ImNsYWltZWQifSwicG9saWN5Ijp7ImRlY2lzaW9uIjoiYWxsb3ciLCJlcnJvcnMiOltdLCJwb2xpY3lEaWdlc3QiOiJiYTRlNDQ2MWZmYzQ2NTliYWIyOTg0ZjIwMDZjZjE2NWVjNTVjZGMxMDU5YTRiYTAwZDNhMjY4NmM5YWJmMjUzIiwicHJvdmVuYW5jZSI6Im9ic2VydmVkIiwicmVhc29ucyI6WyJwb2xpY3kxIl19LCJwcmluY2lwYWwiOnsiaWQiOiJ1c2VyXzQ1NiIsImtleWlkIjoiZWIzOTU1MGJjYzdhMmE2Y2I5YWI0NmM2MjY1YzllNWVlZWM2YmEwYTk4NjM3YTBmNzQ5ZDNkNzZlMDVmNjNlOCIsInByb3ZlbmFuY2UiOiJhdHRlc3RlZCJ9LCJyZWNlaXB0SWQiOiIyYzAxY2U5NS1mMjJjLTRlNGItYjIwZS0yMTFlNjE2YmVjNTIiLCJyZXF1ZXN0Ijp7ImFyZ3MiOnsiYW1vdW50Ijo1MDAwMCwiY3VzdG9tZXJfaWQiOiJjdXN0XzEyMyJ9LCJhcmdzRGlnZXN0IjoiMzNmYzViYTlmMzU5Yzg2NjQ2MmYyYmNmODRjOTg1MjJhMzFlMzllMzVhOGVkYzIzOTZiOTBkMDFjYmRmM2FmNiIsInByb3ZlbmFuY2UiOiJjbGFpbWVkIn0sInNlc3Npb24iOnsiaWQiOm51bGwsInByb3ZlbmFuY2UiOiJjbGFpbWVkIiwidG9vbFVzZUlkIjpudWxsfSwidGltZXN0YW1wIjoiMjAyNi0wOS0wN1QwNjo1Mjo1MS4wNjBaIiwidG9vbCI6eyJuYW1lIjoic3RyaXBlLnJlZnVuZCIsInByb3ZlbmFuY2UiOiJvYnNlcnZlZCJ9fSwicHJlZGljYXRlVHlwZSI6Imh0dHBzOi8vYWdlbnQtY3VzdG9keS5kZXYvcmVjZWlwdC92MC4yIiwic3ViamVjdCI6W3siZGlnZXN0Ijp7InNoYTI1NiI6IjMzZmM1YmE5ZjM1OWM4NjY0NjJmMmJjZjg0Yzk4NTIyYTMxZTM5ZTM1YThlZGMyMzk2YjkwZDAxY2JkZjNhZjYifSwibmFtZSI6InRvb2wtY2FsbDpzdHJpcGUucmVmdW5kOjJjMDFjZTk1LWYyMmMtNGU0Yi1iMjBlLTIxMWU2MTZiZWM1MiJ9XX0=\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"naZ4h5W1szHPDcckU9Lr2gPyZGu6+juHPHr0x/Xj1h98qriYCUtJ3CIuMsIbTpu25tENvH6bdKh5Ol3csVpsBQ==\"}]}",
443
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a\",\"sig\":\"ybG6qougPOAWh5ORfAbA/5K7At4K7uTZtEZszzuTGIn1LYH2CZcAQBXRyoSdmIdLpqq/Rp/sbFYsuDq5IVuDAA==\"}]}"
444
+ ],
445
+ "expected": {
446
+ "ok": false,
447
+ "failing": [
448
+ "log inclusion proof"
449
+ ]
450
+ }
451
+ },
452
+ {
453
+ "name": "log-copy-from-another-log",
454
+ "description": "Verified against a copy of a different log. Everything passes except the recomputed root.",
455
+ "bundle": {
456
+ "envelope": {
457
+ "payloadType": "application/vnd.in-toto+json",
458
+ "payload": "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",
459
+ "signatures": [
460
+ {
461
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
462
+ "sig": "naZ4h5W1szHPDcckU9Lr2gPyZGu6+juHPHr0x/Xj1h98qriYCUtJ3CIuMsIbTpu25tENvH6bdKh5Ol3csVpsBQ=="
463
+ }
464
+ ]
465
+ },
466
+ "treeHead": {
467
+ "payloadType": "application/vnd.agent-custody.treehead+json",
468
+ "payload": "eyJyb290SGFzaCI6ImNmMjNlYjgwMTQ2MjY1NGYyMzVkYzVmYjM2ZmRmOWI0YTlmMTk4NGZjZDgwZGYzYWE5NTFkOWNlODIzZmNiYzMiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjA4M1oiLCJ0cmVlU2l6ZSI6MX0=",
469
+ "signatures": [
470
+ {
471
+ "keyid": "9f037d8eb23b730c06b46c3a3f2fd6cf844964aeea2204dc8b08c12ac8a7a23a",
472
+ "sig": "NoxZSpufnGtoUfqOJh7yEiSPOsf+UlRmoWwH6aVztW5B4ZFacP/QJUpQ4sQMBnIHVRAIqN9sGTfUDvA8jbfTCQ=="
473
+ }
474
+ ]
475
+ },
476
+ "inclusion": {
477
+ "leafIndex": 0,
478
+ "treeSize": 1,
479
+ "hashes": []
480
+ }
481
+ },
482
+ "issuerKeys": [
483
+ "gateway"
484
+ ],
485
+ "principalKeys": [
486
+ "principal"
487
+ ],
488
+ "logKeys": [],
489
+ "log": [
490
+ "not-the-same-leaf"
491
+ ],
492
+ "expected": {
493
+ "ok": false,
494
+ "failing": [
495
+ "log file root matches tree head"
496
+ ]
497
+ }
498
+ },
499
+ {
500
+ "name": "sdk-executed",
501
+ "description": "A receipt from the in-process SDK: issuer kind sdk, principal claimed, no delegation, every field claimed. Passes; the report says what it is worth.",
502
+ "bundle": {
503
+ "envelope": {
504
+ "payloadType": "application/vnd.in-toto+json",
505
+ "payload": "eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJwcmVkaWNhdGUiOnsiYWdlbnQiOnsiaWQiOiJiaWxsaW5nLWJvdCIsInByb3ZlbmFuY2UiOiJjbGFpbWVkIn0sImV4ZWN1dGlvbiI6eyJwcm92ZW5hbmNlIjoiY2xhaW1lZCIsInJlc3VsdCI6eyJyZWZ1bmRfaWQiOiJyZV8xIn0sInJlc3VsdERpZ2VzdCI6IjQ0MWNlOWE3NTE0NGI3NDViOTBmOWMxNzM2NjE1NzczMTIwYmMyNjZlZDFkNzZjNGY0ODE4YTA0YmY0M2FjMDEiLCJzdGF0dXMiOiJleGVjdXRlZCJ9LCJmYWN0cyI6e30sImlzc3VlciI6eyJmcmFtZXdvcmsiOiJ2ZWN0b3JzIiwia2V5aWQiOiI1MDg2ZDJiMDI0ZWIwNmRhNTQyNjY4ZTUxYzQ2NWQ4ZTk3NzFlODUxNDJlNzU1NmE5ODg0OTY5Zjk4YTljYjMzIiwia2luZCI6InNkayIsInZlcnNpb24iOiIwLjEuMCJ9LCJtb2RlbCI6eyJpZCI6bnVsbCwicHJvdmVuYW5jZSI6ImNsYWltZWQifSwicG9saWN5Ijp7ImRlY2lzaW9uIjoiYWxsb3ciLCJlcnJvcnMiOltdLCJwb2xpY3lEaWdlc3QiOiI0ODIwZjE2ZThmZTFjNmE1MzA3ZDVmMGVhNWM4NmM4Zjg1ZjBmNGY5OGM2NTJiOGM1MWVkZWYwOGU1YThmMjdiIiwicHJvdmVuYW5jZSI6ImNsYWltZWQiLCJyZWFzb25zIjpbInBvbGljeTEiXX0sInByaW5jaXBhbCI6eyJpZCI6InVzZXJfNDU2IiwicHJvdmVuYW5jZSI6ImNsYWltZWQifSwicmVjZWlwdElkIjoiY2YxMjcxZjYtMzU2Ni00MWEyLWFmMTAtMzVjMDhjYzM5MmJkIiwicmVxdWVzdCI6eyJhcmdzIjp7ImFtb3VudCI6NTAwfSwiYXJnc0RpZ2VzdCI6IjA3ODA0OTE4MDNkN2EwODQ4YWEyNjJlMzQ2ZDhiMWEzZDdjZmEzMWZlNzY1NTk0OGRlMDM0ZWM3YzEwZjg0ZDAiLCJwcm92ZW5hbmNlIjoiY2xhaW1lZCJ9LCJzZXNzaW9uIjp7ImlkIjoic2Vzcy0xIiwicHJvdmVuYW5jZSI6ImNsYWltZWQiLCJ0b29sVXNlSWQiOiJjYWxsLTEifSwidGltZXN0YW1wIjoiMjAyNi0wOS0wN1QwNjo1Mjo1MS4wOTdaIiwidG9vbCI6eyJuYW1lIjoic3RyaXBlLnJlZnVuZCIsInByb3ZlbmFuY2UiOiJjbGFpbWVkIn19LCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9hZ2VudC1jdXN0b2R5LmRldi9yZWNlaXB0L3YwLjIiLCJzdWJqZWN0IjpbeyJkaWdlc3QiOnsic2hhMjU2IjoiMDc4MDQ5MTgwM2Q3YTA4NDhhYTI2MmUzNDZkOGIxYTNkN2NmYTMxZmU3NjU1OTQ4ZGUwMzRlYzdjMTBmODRkMCJ9LCJuYW1lIjoidG9vbC1jYWxsOnN0cmlwZS5yZWZ1bmQ6Y2YxMjcxZjYtMzU2Ni00MWEyLWFmMTAtMzVjMDhjYzM5MmJkIn1dfQ==",
506
+ "signatures": [
507
+ {
508
+ "keyid": "5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33",
509
+ "sig": "//WVM3vJ2D/H73+8ctgb7ZRe6nmFYSYgHumztFnxDIveWfRg/VZt1GOfOmVIk1QU6M+Z/4tPiyuBc5Lm/QLlBg=="
510
+ }
511
+ ]
512
+ },
513
+ "treeHead": {
514
+ "payloadType": "application/vnd.agent-custody.treehead+json",
515
+ "payload": "eyJyb290SGFzaCI6IjI2YTg3YjQ4NzI3YzBhYWMyMTllOWRmZDcyZjZiZWRmYzFlNjAyNzY3NDNlMzUxNzI2MmNhNDcyMTdkYmU5MTAiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjA5N1oiLCJ0cmVlU2l6ZSI6MX0=",
516
+ "signatures": [
517
+ {
518
+ "keyid": "5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33",
519
+ "sig": "ByFZZBzBuuW2xn4dio7BbxOQLVFbQhpvdISO7aeFsZFv59u9R2pc9XO93s98ElucFGr1vcxTbjaJDJ9+B0YyDA=="
520
+ }
521
+ ]
522
+ },
523
+ "inclusion": {
524
+ "leafIndex": 0,
525
+ "treeSize": 1,
526
+ "hashes": []
527
+ }
528
+ },
529
+ "issuerKeys": [
530
+ "app"
531
+ ],
532
+ "principalKeys": [],
533
+ "logKeys": [],
534
+ "log": [
535
+ "{\"payload\":\"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJwcmVkaWNhdGUiOnsiYWdlbnQiOnsiaWQiOiJiaWxsaW5nLWJvdCIsInByb3ZlbmFuY2UiOiJjbGFpbWVkIn0sImV4ZWN1dGlvbiI6eyJwcm92ZW5hbmNlIjoiY2xhaW1lZCIsInJlc3VsdCI6eyJyZWZ1bmRfaWQiOiJyZV8xIn0sInJlc3VsdERpZ2VzdCI6IjQ0MWNlOWE3NTE0NGI3NDViOTBmOWMxNzM2NjE1NzczMTIwYmMyNjZlZDFkNzZjNGY0ODE4YTA0YmY0M2FjMDEiLCJzdGF0dXMiOiJleGVjdXRlZCJ9LCJmYWN0cyI6e30sImlzc3VlciI6eyJmcmFtZXdvcmsiOiJ2ZWN0b3JzIiwia2V5aWQiOiI1MDg2ZDJiMDI0ZWIwNmRhNTQyNjY4ZTUxYzQ2NWQ4ZTk3NzFlODUxNDJlNzU1NmE5ODg0OTY5Zjk4YTljYjMzIiwia2luZCI6InNkayIsInZlcnNpb24iOiIwLjEuMCJ9LCJtb2RlbCI6eyJpZCI6bnVsbCwicHJvdmVuYW5jZSI6ImNsYWltZWQifSwicG9saWN5Ijp7ImRlY2lzaW9uIjoiYWxsb3ciLCJlcnJvcnMiOltdLCJwb2xpY3lEaWdlc3QiOiI0ODIwZjE2ZThmZTFjNmE1MzA3ZDVmMGVhNWM4NmM4Zjg1ZjBmNGY5OGM2NTJiOGM1MWVkZWYwOGU1YThmMjdiIiwicHJvdmVuYW5jZSI6ImNsYWltZWQiLCJyZWFzb25zIjpbInBvbGljeTEiXX0sInByaW5jaXBhbCI6eyJpZCI6InVzZXJfNDU2IiwicHJvdmVuYW5jZSI6ImNsYWltZWQifSwicmVjZWlwdElkIjoiY2YxMjcxZjYtMzU2Ni00MWEyLWFmMTAtMzVjMDhjYzM5MmJkIiwicmVxdWVzdCI6eyJhcmdzIjp7ImFtb3VudCI6NTAwfSwiYXJnc0RpZ2VzdCI6IjA3ODA0OTE4MDNkN2EwODQ4YWEyNjJlMzQ2ZDhiMWEzZDdjZmEzMWZlNzY1NTk0OGRlMDM0ZWM3YzEwZjg0ZDAiLCJwcm92ZW5hbmNlIjoiY2xhaW1lZCJ9LCJzZXNzaW9uIjp7ImlkIjoic2Vzcy0xIiwicHJvdmVuYW5jZSI6ImNsYWltZWQiLCJ0b29sVXNlSWQiOiJjYWxsLTEifSwidGltZXN0YW1wIjoiMjAyNi0wOS0wN1QwNjo1Mjo1MS4wOTdaIiwidG9vbCI6eyJuYW1lIjoic3RyaXBlLnJlZnVuZCIsInByb3ZlbmFuY2UiOiJjbGFpbWVkIn19LCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9hZ2VudC1jdXN0b2R5LmRldi9yZWNlaXB0L3YwLjIiLCJzdWJqZWN0IjpbeyJkaWdlc3QiOnsic2hhMjU2IjoiMDc4MDQ5MTgwM2Q3YTA4NDhhYTI2MmUzNDZkOGIxYTNkN2NmYTMxZmU3NjU1OTQ4ZGUwMzRlYzdjMTBmODRkMCJ9LCJuYW1lIjoidG9vbC1jYWxsOnN0cmlwZS5yZWZ1bmQ6Y2YxMjcxZjYtMzU2Ni00MWEyLWFmMTAtMzVjMDhjYzM5MmJkIn1dfQ==\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33\",\"sig\":\"//WVM3vJ2D/H73+8ctgb7ZRe6nmFYSYgHumztFnxDIveWfRg/VZt1GOfOmVIk1QU6M+Z/4tPiyuBc5Lm/QLlBg==\"}]}",
536
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33\",\"sig\":\"S+FVq9OuZmxSgg9WPKdknxtZfl2W9vxV0PqEXje4knCD9P95IyBbGPb3eK+U85xA+I7lk4yFdRY1jWzBCjYZDA==\"}]}"
537
+ ],
538
+ "expected": {
539
+ "ok": true,
540
+ "failing": []
541
+ }
542
+ },
543
+ {
544
+ "name": "sdk-denied",
545
+ "description": "An SDK denial receipt: the wrapped function was never called.",
546
+ "bundle": {
547
+ "envelope": {
548
+ "payloadType": "application/vnd.in-toto+json",
549
+ "payload": "eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJwcmVkaWNhdGUiOnsiYWdlbnQiOnsiaWQiOiJiaWxsaW5nLWJvdCIsInByb3ZlbmFuY2UiOiJjbGFpbWVkIn0sImV4ZWN1dGlvbiI6eyJwcm92ZW5hbmNlIjoiY2xhaW1lZCIsInJlYXNvbiI6Im92ZXIgbGltaXQiLCJzdGF0dXMiOiJkZW5pZWQifSwiZmFjdHMiOnt9LCJpc3N1ZXIiOnsiZnJhbWV3b3JrIjoidmVjdG9ycyIsImtleWlkIjoiNTA4NmQyYjAyNGViMDZkYTU0MjY2OGU1MWM0NjVkOGU5NzcxZTg1MTQyZTc1NTZhOTg4NDk2OWY5OGE5Y2IzMyIsImtpbmQiOiJzZGsiLCJ2ZXJzaW9uIjoiMC4xLjAifSwibW9kZWwiOnsiaWQiOm51bGwsInByb3ZlbmFuY2UiOiJjbGFpbWVkIn0sInBvbGljeSI6eyJkZWNpc2lvbiI6ImRlbnkiLCJlcnJvcnMiOltdLCJwb2xpY3lEaWdlc3QiOiI0ODIwZjE2ZThmZTFjNmE1MzA3ZDVmMGVhNWM4NmM4Zjg1ZjBmNGY5OGM2NTJiOGM1MWVkZWYwOGU1YThmMjdiIiwicHJvdmVuYW5jZSI6ImNsYWltZWQiLCJyZWFzb25zIjpbXX0sInByaW5jaXBhbCI6eyJpZCI6InVzZXJfNDU2IiwicHJvdmVuYW5jZSI6ImNsYWltZWQifSwicmVjZWlwdElkIjoiZjhkZDQ1NGYtN2VmYy00NDA5LTliOTUtZDAzMjIwOGRhNWQxIiwicmVxdWVzdCI6eyJhcmdzIjp7ImFtb3VudCI6NTAwMDAwfSwiYXJnc0RpZ2VzdCI6IjA4N2RkMDM5MTJlYTQ1Y2QwY2U4MGNmMTNhOTM3MzU5MzIwOTk4ZWIyZmM0YjhiNzdhZjU1MmU3Njc2YThkOTUiLCJwcm92ZW5hbmNlIjoiY2xhaW1lZCJ9LCJzZXNzaW9uIjp7ImlkIjpudWxsLCJwcm92ZW5hbmNlIjoiY2xhaW1lZCIsInRvb2xVc2VJZCI6bnVsbH0sInRpbWVzdGFtcCI6IjIwMjYtMDktMDdUMDY6NTI6NTEuMDk4WiIsInRvb2wiOnsibmFtZSI6InN0cmlwZS5yZWZ1bmQiLCJwcm92ZW5hbmNlIjoiY2xhaW1lZCJ9fSwicHJlZGljYXRlVHlwZSI6Imh0dHBzOi8vYWdlbnQtY3VzdG9keS5kZXYvcmVjZWlwdC92MC4yIiwic3ViamVjdCI6W3siZGlnZXN0Ijp7InNoYTI1NiI6IjA4N2RkMDM5MTJlYTQ1Y2QwY2U4MGNmMTNhOTM3MzU5MzIwOTk4ZWIyZmM0YjhiNzdhZjU1MmU3Njc2YThkOTUifSwibmFtZSI6InRvb2wtY2FsbDpzdHJpcGUucmVmdW5kOmY4ZGQ0NTRmLTdlZmMtNDQwOS05Yjk1LWQwMzIyMDhkYTVkMSJ9XX0=",
550
+ "signatures": [
551
+ {
552
+ "keyid": "5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33",
553
+ "sig": "S+FVq9OuZmxSgg9WPKdknxtZfl2W9vxV0PqEXje4knCD9P95IyBbGPb3eK+U85xA+I7lk4yFdRY1jWzBCjYZDA=="
554
+ }
555
+ ]
556
+ },
557
+ "treeHead": {
558
+ "payloadType": "application/vnd.agent-custody.treehead+json",
559
+ "payload": "eyJyb290SGFzaCI6IjkyYWUyZjUxYzViZDJmNTcyMzEyOTVmMDczYWQ4ZjUyOGM0NzI4NTgwYWI4MGUyY2ZlZWMwMTBjNTY4ZTgxMWYiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjA5OFoiLCJ0cmVlU2l6ZSI6Mn0=",
560
+ "signatures": [
561
+ {
562
+ "keyid": "5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33",
563
+ "sig": "mB6tKVXA1LHedUtLC6Kt4XgVRosiwIyVbdUHNU3Ya2LEK4yFg/SdMSxQvhr1ISJwz4sHJ7tE1S4I1lJ87OrKDA=="
564
+ }
565
+ ]
566
+ },
567
+ "inclusion": {
568
+ "leafIndex": 1,
569
+ "treeSize": 2,
570
+ "hashes": [
571
+ "26a87b48727c0aac219e9dfd72f6bedfc1e60276743e3517262ca47217dbe910"
572
+ ]
573
+ }
574
+ },
575
+ "issuerKeys": [
576
+ "app"
577
+ ],
578
+ "principalKeys": [],
579
+ "logKeys": [],
580
+ "log": [
581
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33\",\"sig\":\"//WVM3vJ2D/H73+8ctgb7ZRe6nmFYSYgHumztFnxDIveWfRg/VZt1GOfOmVIk1QU6M+Z/4tPiyuBc5Lm/QLlBg==\"}]}",
582
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33\",\"sig\":\"S+FVq9OuZmxSgg9WPKdknxtZfl2W9vxV0PqEXje4knCD9P95IyBbGPb3eK+U85xA+I7lk4yFdRY1jWzBCjYZDA==\"}]}"
583
+ ],
584
+ "expected": {
585
+ "ok": true,
586
+ "failing": []
587
+ }
588
+ },
589
+ {
590
+ "name": "remote-log-with-log-key",
591
+ "description": "Logged to a log run by someone else: the tree head is signed by the log's key. With that key trusted, everything passes and the report names the log key.",
592
+ "bundle": {
593
+ "envelope": {
594
+ "payloadType": "application/vnd.in-toto+json",
595
+ "payload": "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",
596
+ "signatures": [
597
+ {
598
+ "keyid": "5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33",
599
+ "sig": "4cTILLUalhbWTbQDqBafwunVP4oqStkgnQ8br1wzx0loNoR++L3mINFoeTJd9oFCC8nO6axaMC5OQ8XrbCktCg=="
600
+ }
601
+ ]
602
+ },
603
+ "treeHead": {
604
+ "payloadType": "application/vnd.agent-custody.treehead+json",
605
+ "payload": "eyJyb290SGFzaCI6Ijg3MzM5M2E4ZTQ4ZmFkNzVlMmRkMzY1MzRjNmRjNzUzMTc5YmM0NmEzMTAxNDZjZTI2OGUxNTc2ODZiOGMwZTQiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjExMFoiLCJ0cmVlU2l6ZSI6MX0=",
606
+ "signatures": [
607
+ {
608
+ "keyid": "e1ed29255a4bd710006fe9ad333514e71c705608b769029088a818f57bcf080a",
609
+ "sig": "vydFxb4Z753KUPOXLEFiYnE0nntaoU9xXtBe7IMW8eucYeef+XpGu+4+bXpo/zYZATcx4h+7bMmDd3frqizkBg=="
610
+ }
611
+ ]
612
+ },
613
+ "inclusion": {
614
+ "leafIndex": 0,
615
+ "treeSize": 1,
616
+ "hashes": []
617
+ }
618
+ },
619
+ "issuerKeys": [
620
+ "app"
621
+ ],
622
+ "principalKeys": [],
623
+ "logKeys": [
624
+ "log"
625
+ ],
626
+ "log": [
627
+ "{\"payload\":\"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJwcmVkaWNhdGUiOnsiYWdlbnQiOnsiaWQiOiJyZW1vdGUtYm90IiwicHJvdmVuYW5jZSI6ImNsYWltZWQifSwiZXhlY3V0aW9uIjp7InByb3ZlbmFuY2UiOiJjbGFpbWVkIiwicmVzdWx0Ijp7InBsYW4iOiJwcm8ifSwicmVzdWx0RGlnZXN0IjoiMDI5YzQwZDJlNWNlMjQ1MzUwODZmYWRhNjdlYjNlYzg1YTFmODE2N2Q1YTk5ZWFiNzkxN2VjMDU3NjEyNmU5OSIsInN0YXR1cyI6ImV4ZWN1dGVkIn0sImZhY3RzIjp7fSwiaXNzdWVyIjp7ImtleWlkIjoiNTA4NmQyYjAyNGViMDZkYTU0MjY2OGU1MWM0NjVkOGU5NzcxZTg1MTQyZTc1NTZhOTg4NDk2OWY5OGE5Y2IzMyIsImtpbmQiOiJzZGsiLCJ2ZXJzaW9uIjoiMC4xLjAifSwibW9kZWwiOnsiaWQiOm51bGwsInByb3ZlbmFuY2UiOiJjbGFpbWVkIn0sInBvbGljeSI6bnVsbCwicHJpbmNpcGFsIjp7ImlkIjpudWxsLCJwcm92ZW5hbmNlIjoiY2xhaW1lZCJ9LCJyZWNlaXB0SWQiOiI0Mzc0ZTZjMC0yZjA5LTQ5ODUtYmJlYi05MDVlYWUzODk1YmUiLCJyZXF1ZXN0Ijp7ImFyZ3MiOnsiaWQiOiJhY2N0OjQyIn0sImFyZ3NEaWdlc3QiOiIyN2M2MDNjZjMxNDU2NzMzMTlkNjQxMDhlODk0NGVjY2QwZDg1OWM2NmZhOGYyMDljODI5NjBlNWQ5ZjcwNzU5IiwicHJvdmVuYW5jZSI6ImNsYWltZWQifSwic2Vzc2lvbiI6eyJpZCI6bnVsbCwicHJvdmVuYW5jZSI6ImNsYWltZWQiLCJ0b29sVXNlSWQiOm51bGx9LCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjEwM1oiLCJ0b29sIjp7Im5hbWUiOiJjcm0ubG9va3VwIiwicHJvdmVuYW5jZSI6ImNsYWltZWQifX0sInByZWRpY2F0ZVR5cGUiOiJodHRwczovL2FnZW50LWN1c3RvZHkuZGV2L3JlY2VpcHQvdjAuMiIsInN1YmplY3QiOlt7ImRpZ2VzdCI6eyJzaGEyNTYiOiIyN2M2MDNjZjMxNDU2NzMzMTlkNjQxMDhlODk0NGVjY2QwZDg1OWM2NmZhOGYyMDljODI5NjBlNWQ5ZjcwNzU5In0sIm5hbWUiOiJ0b29sLWNhbGw6Y3JtLmxvb2t1cDo0Mzc0ZTZjMC0yZjA5LTQ5ODUtYmJlYi05MDVlYWUzODk1YmUifV19\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33\",\"sig\":\"4cTILLUalhbWTbQDqBafwunVP4oqStkgnQ8br1wzx0loNoR++L3mINFoeTJd9oFCC8nO6axaMC5OQ8XrbCktCg==\"}]}",
628
+ "{\"payload\":\"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\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33\",\"sig\":\"hBNOHQSe3J6m0P+fOjyYJwDa8f8PK5fAoL4tPjnuTMgRSfAq5ZUZUSOEtbmIEl4mFMV2cysAOoVdgeXE4SnwAA==\"}]}"
629
+ ],
630
+ "expected": {
631
+ "ok": true,
632
+ "failing": []
633
+ }
634
+ },
635
+ {
636
+ "name": "remote-log-without-log-key",
637
+ "description": "The same receipt with only the issuer key trusted. The tree head signature fails; nothing about inclusion can be decided.",
638
+ "bundle": {
639
+ "envelope": {
640
+ "payloadType": "application/vnd.in-toto+json",
641
+ "payload": "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",
642
+ "signatures": [
643
+ {
644
+ "keyid": "5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33",
645
+ "sig": "4cTILLUalhbWTbQDqBafwunVP4oqStkgnQ8br1wzx0loNoR++L3mINFoeTJd9oFCC8nO6axaMC5OQ8XrbCktCg=="
646
+ }
647
+ ]
648
+ },
649
+ "treeHead": {
650
+ "payloadType": "application/vnd.agent-custody.treehead+json",
651
+ "payload": "eyJyb290SGFzaCI6Ijg3MzM5M2E4ZTQ4ZmFkNzVlMmRkMzY1MzRjNmRjNzUzMTc5YmM0NmEzMTAxNDZjZTI2OGUxNTc2ODZiOGMwZTQiLCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjExMFoiLCJ0cmVlU2l6ZSI6MX0=",
652
+ "signatures": [
653
+ {
654
+ "keyid": "e1ed29255a4bd710006fe9ad333514e71c705608b769029088a818f57bcf080a",
655
+ "sig": "vydFxb4Z753KUPOXLEFiYnE0nntaoU9xXtBe7IMW8eucYeef+XpGu+4+bXpo/zYZATcx4h+7bMmDd3frqizkBg=="
656
+ }
657
+ ]
658
+ },
659
+ "inclusion": {
660
+ "leafIndex": 0,
661
+ "treeSize": 1,
662
+ "hashes": []
663
+ }
664
+ },
665
+ "issuerKeys": [
666
+ "app"
667
+ ],
668
+ "principalKeys": [],
669
+ "logKeys": [],
670
+ "log": [
671
+ "{\"payload\":\"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJwcmVkaWNhdGUiOnsiYWdlbnQiOnsiaWQiOiJyZW1vdGUtYm90IiwicHJvdmVuYW5jZSI6ImNsYWltZWQifSwiZXhlY3V0aW9uIjp7InByb3ZlbmFuY2UiOiJjbGFpbWVkIiwicmVzdWx0Ijp7InBsYW4iOiJwcm8ifSwicmVzdWx0RGlnZXN0IjoiMDI5YzQwZDJlNWNlMjQ1MzUwODZmYWRhNjdlYjNlYzg1YTFmODE2N2Q1YTk5ZWFiNzkxN2VjMDU3NjEyNmU5OSIsInN0YXR1cyI6ImV4ZWN1dGVkIn0sImZhY3RzIjp7fSwiaXNzdWVyIjp7ImtleWlkIjoiNTA4NmQyYjAyNGViMDZkYTU0MjY2OGU1MWM0NjVkOGU5NzcxZTg1MTQyZTc1NTZhOTg4NDk2OWY5OGE5Y2IzMyIsImtpbmQiOiJzZGsiLCJ2ZXJzaW9uIjoiMC4xLjAifSwibW9kZWwiOnsiaWQiOm51bGwsInByb3ZlbmFuY2UiOiJjbGFpbWVkIn0sInBvbGljeSI6bnVsbCwicHJpbmNpcGFsIjp7ImlkIjpudWxsLCJwcm92ZW5hbmNlIjoiY2xhaW1lZCJ9LCJyZWNlaXB0SWQiOiI0Mzc0ZTZjMC0yZjA5LTQ5ODUtYmJlYi05MDVlYWUzODk1YmUiLCJyZXF1ZXN0Ijp7ImFyZ3MiOnsiaWQiOiJhY2N0OjQyIn0sImFyZ3NEaWdlc3QiOiIyN2M2MDNjZjMxNDU2NzMzMTlkNjQxMDhlODk0NGVjY2QwZDg1OWM2NmZhOGYyMDljODI5NjBlNWQ5ZjcwNzU5IiwicHJvdmVuYW5jZSI6ImNsYWltZWQifSwic2Vzc2lvbiI6eyJpZCI6bnVsbCwicHJvdmVuYW5jZSI6ImNsYWltZWQiLCJ0b29sVXNlSWQiOm51bGx9LCJ0aW1lc3RhbXAiOiIyMDI2LTA5LTA3VDA2OjUyOjUxLjEwM1oiLCJ0b29sIjp7Im5hbWUiOiJjcm0ubG9va3VwIiwicHJvdmVuYW5jZSI6ImNsYWltZWQifX0sInByZWRpY2F0ZVR5cGUiOiJodHRwczovL2FnZW50LWN1c3RvZHkuZGV2L3JlY2VpcHQvdjAuMiIsInN1YmplY3QiOlt7ImRpZ2VzdCI6eyJzaGEyNTYiOiIyN2M2MDNjZjMxNDU2NzMzMTlkNjQxMDhlODk0NGVjY2QwZDg1OWM2NmZhOGYyMDljODI5NjBlNWQ5ZjcwNzU5In0sIm5hbWUiOiJ0b29sLWNhbGw6Y3JtLmxvb2t1cDo0Mzc0ZTZjMC0yZjA5LTQ5ODUtYmJlYi05MDVlYWUzODk1YmUifV19\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33\",\"sig\":\"4cTILLUalhbWTbQDqBafwunVP4oqStkgnQ8br1wzx0loNoR++L3mINFoeTJd9oFCC8nO6axaMC5OQ8XrbCktCg==\"}]}",
672
+ "{\"payload\":\"eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJwcmVkaWNhdGUiOnsiYWdlbnQiOnsiaWQiOiJyZW1vdGUtYm90IiwicHJvdmVuYW5jZSI6ImNsYWltZWQifSwiZXhlY3V0aW9uIjp7InByb3ZlbmFuY2UiOiJjbGFpbWVkIiwicmVzdWx0Ijp7InBsYW4iOiJmcmVlIn0sInJlc3VsdERpZ2VzdCI6ImEzODRlZTBmMTI1ZTc0NzI1ODJlNGZkNDU4MGMyYzNhMGRkYzU5ZmM0MWZhNGIzZGQ4MDlkNWMyZjkyZWU1ZTIiLCJzdGF0dXMiOiJleGVjdXRlZCJ9LCJmYWN0cyI6e30sImlzc3VlciI6eyJrZXlpZCI6IjUwODZkMmIwMjRlYjA2ZGE1NDI2NjhlNTFjNDY1ZDhlOTc3MWU4NTE0MmU3NTU2YTk4ODQ5NjlmOThhOWNiMzMiLCJraW5kIjoic2RrIiwidmVyc2lvbiI6IjAuMS4wIn0sIm1vZGVsIjp7ImlkIjpudWxsLCJwcm92ZW5hbmNlIjoiY2xhaW1lZCJ9LCJwb2xpY3kiOm51bGwsInByaW5jaXBhbCI6eyJpZCI6bnVsbCwicHJvdmVuYW5jZSI6ImNsYWltZWQifSwicmVjZWlwdElkIjoiNzY5Y2M4MjgtMTVlNi00OTQ2LTg4NzgtODJlZTc5MmQzNzU1IiwicmVxdWVzdCI6eyJhcmdzIjp7ImlkIjoiYWNjdDo0MyJ9LCJhcmdzRGlnZXN0IjoiOGVkMGIwZDlmZjUzMWRlNDhjZTkwODM4NDBkMzdjOThhN2M0OGMxOTg2Mzc5YjQ4MzlkOTY2ZGYyODI0YTM0YiIsInByb3ZlbmFuY2UiOiJjbGFpbWVkIn0sInNlc3Npb24iOnsiaWQiOm51bGwsInByb3ZlbmFuY2UiOiJjbGFpbWVkIiwidG9vbFVzZUlkIjpudWxsfSwidGltZXN0YW1wIjoiMjAyNi0wOS0wN1QwNjo1Mjo1MS4xMTJaIiwidG9vbCI6eyJuYW1lIjoiY3JtLmxvb2t1cCIsInByb3ZlbmFuY2UiOiJjbGFpbWVkIn19LCJwcmVkaWNhdGVUeXBlIjoiaHR0cHM6Ly9hZ2VudC1jdXN0b2R5LmRldi9yZWNlaXB0L3YwLjIiLCJzdWJqZWN0IjpbeyJkaWdlc3QiOnsic2hhMjU2IjoiOGVkMGIwZDlmZjUzMWRlNDhjZTkwODM4NDBkMzdjOThhN2M0OGMxOTg2Mzc5YjQ4MzlkOTY2ZGYyODI0YTM0YiJ9LCJuYW1lIjoidG9vbC1jYWxsOmNybS5sb29rdXA6NzY5Y2M4MjgtMTVlNi00OTQ2LTg4NzgtODJlZTc5MmQzNzU1In1dfQ==\",\"payloadType\":\"application/vnd.in-toto+json\",\"signatures\":[{\"keyid\":\"5086d2b024eb06da542668e51c465d8e9771e85142e7556a9884969f98a9cb33\",\"sig\":\"hBNOHQSe3J6m0P+fOjyYJwDa8f8PK5fAoL4tPjnuTMgRSfAq5ZUZUSOEtbmIEl4mFMV2cysAOoVdgeXE4SnwAA==\"}]}"
673
+ ],
674
+ "expected": {
675
+ "ok": false,
676
+ "failing": [
677
+ "tree head signature"
678
+ ]
679
+ }
680
+ }
681
+ ]
682
+ }