@atrib/verify 0.8.0 → 0.8.2

package/LICENSE

@@ -201,7 +201,7 @@
    See the License for the specific language governing permissions and
    limitations under the License.
 
-   Copyright 2025-2026 Atrib contributors
+   Copyright 2025-2026 atrib contributors
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.

package/README.md

@@ -1,9 +1,17 @@
 # `@atrib/verify`
 
-**Independent verification for Atrib's verifiable action layer. Checks signed records, evidence blocks, handoff packets, and settlement documents. Re-runs the spec [§4.6](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#46-the-calculation-algorithm) calculation algorithm locally and checks the result against what a recommendation document claims. No trust in any intermediary required.**
+**Independent verification for atrib's verifiable action layer. Checks signed records, evidence blocks, handoff packets, and settlement documents. Re-runs the spec [§4.6](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#46-the-calculation-algorithm) calculation algorithm locally and checks the result against what a recommendation document claims. No trust in any intermediary required.**
 
 This is the **verifier half** of the atrib protocol, used by merchants closing transactions, auditors checking agent activity, teams accepting handoffs, policy systems reviewing high-impact actions, regulators querying historical state, and any party that needs to validate atrib data independently. The agent and tool servers produce signed attribution records. The Merkle log stores them. This package answers the questions any verifier has to answer: _given the graph and the policy, is this distribution actually correct? Was this record actually signed by the key it claims? Did this action actually happen at the time it claims?_
 
+## Install
+
+```bash
+pnpm add @atrib/verify
+```
+
+Verify a local build with `pnpm --filter @atrib/verify test`.
+
 ## Quick start
 
 ```typescript
@@ -15,6 +23,8 @@ const verifier = new AtribVerifier({
   logEndpoint: 'https://log.atrib.dev/v1',
 })
 
+// recommendationDoc is a §4.7 settlement RecommendationDocument produced by a
+// calculator or merchant (signed distribution over record hashes).
 const result = await verifier.verify(recommendationDoc)
 // {
 //   valid: true,
@@ -473,7 +483,7 @@ This is what makes verification possible: the merchant's local recalculation is
 
 Per the absolute invariant (also enforced in `@atrib/mcp` and `@atrib/agent`), atrib failures never break the host:
 
-- Missing or invalid `merchantKey` → constructor logs `atrib: ...` warning, `merchantPrivateKey = null`, no throw.
+- Missing or invalid `merchantKey` → constructor logs an `atrib: ...` warning, sets `merchantPrivateKey = null`, and does not throw.
 - `verify()` errors during signature resolution, graph fetch, or calculation are caught and surfaced as `warnings: string[]` with `valid = false`.
 - `calculate({ signWith: 'merchant' })` with a missing key returns an unsigned document plus a warning, rather than throwing.
 
@@ -510,3 +520,7 @@ The full protocol spec is at [`atrib-spec.md`](https://github.com/creatornader/a
 ---
 
 > **A note on documentation links.** The atrib protocol repository is currently private (in-progress public preparation). Links in this README to the spec and sister packages (`atrib-spec.md`, `packages/agent/README.md`, etc.) point at `github.com/creatornader/atrib/blob/main/...` URLs that will resolve once the repository goes public. Until then, see [`atrib.dev`](https://atrib.dev) for the protocol overview.
+
+## Part of atrib
+
+atrib is an open protocol for verifiable agent actions. Every action becomes a signed, chain-linked record that anyone can verify against a public Merkle log, with no operator to trust. This package is one entrypoint. See the [full package family](https://github.com/creatornader/atrib#packages) and the [protocol spec](https://github.com/creatornader/atrib/blob/main/atrib-spec.md).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atrib/verify",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -13,10 +13,13 @@
   "files": [
     "dist"
   ],
-  "description": "Verifier library for Atrib's verifiable action layer. Checks records, evidence, handoffs, graph derivation, and settlement documents.",
+  "description": "Verifier library for atrib's verifiable action layer. Checks records, evidence, handoffs, graph derivation, and settlement documents.",
   "author": "atrib <hello@atrib.dev>",
   "license": "Apache-2.0",
   "homepage": "https://atrib.dev",
+  "publishConfig": {
+    "access": "public"
+  },
   "keywords": [
     "mcp",
     "model-context-protocol",
@@ -33,7 +36,7 @@
     "@sd-jwt/sd-jwt-vc": "0.19.0",
     "canonicalize": "^3.0.0",
     "jose": "6.2.3",
-    "@atrib/mcp": "0.19.0"
+    "@atrib/mcp": "0.19.1"
   },
   "devDependencies": {
     "@types/node": "^25.9.3",