@agledger/verify 0.1.0 → 0.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -3
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -16,7 +16,11 @@ org-admin-reads STH + fork detection) and the full-vault loader.
|
|
|
16
16
|
The engine signs every state transition with Ed25519. A customer's auditor
|
|
17
17
|
needs an independent verifier that does not trust the engine — if the engine
|
|
18
18
|
were compromised, an in-engine "everything is fine" report would be worth
|
|
19
|
-
nothing. This package is that escape hatch
|
|
19
|
+
nothing. This package is that escape hatch: it lives outside the engine and
|
|
20
|
+
checks a dump the operator produces with the engine's `vault:dump` exporter
|
|
21
|
+
(`scripts/dump-vault.ts` in agledger-api). For a fully independent audit, supply
|
|
22
|
+
the vault verification keys out of band rather than trusting any keys carried in
|
|
23
|
+
the dump.
|
|
20
24
|
|
|
21
25
|
## CLI
|
|
22
26
|
|
|
@@ -102,8 +106,10 @@ All timestamps are ISO-8601. Bigints are serialized as JS numbers.
|
|
|
102
106
|
|
|
103
107
|
The DUMP-kind vectors under `testdata/conformance/dump/` (manifest:
|
|
104
108
|
`testdata/conformance/manifest-dump.json`) are the anti-drift seam shared with
|
|
105
|
-
the independent Python verifier.
|
|
109
|
+
the independent Python verifier. They are **real engine output** — produced and
|
|
110
|
+
owned by `agledger-api`, not generated here. Regenerate (on a wire-format
|
|
111
|
+
change) from a checkout of `agledger-api` with a local Postgres up:
|
|
106
112
|
|
|
107
113
|
```bash
|
|
108
|
-
|
|
114
|
+
pnpm generate:corpus # writes export/ + dump/ + both manifests into this repo
|
|
109
115
|
```
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@agledger/verify",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.1",
|
|
4
4
|
"description": "Standalone offline verifier for a full AGLedger audit-vault + org-admin-reads NDJSON dump. Refactored onto @agledger/verify-core — no engine, database, or network dependency.",
|
|
5
5
|
"license": "SEE LICENSE IN LICENSE",
|
|
6
6
|
"type": "module",
|