@emilia-protocol/gate 0.10.0 → 0.13.0

package/dist/reports/external-verification.js

@@ -0,0 +1,209 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EP-EXTERNAL-VERIFICATION-STATEMENT-v1.
+ *
+ * A signed statement a NON-EMILIA verifier can issue after it re-performs an
+ * evidence log, replays an admissibility profile, or runs a conformance harness.
+ * This is the missing adoption rail between "our verifier works" and "an
+ * outside party says exactly what they checked."
+ *
+ * Scope is intentionally narrow:
+ *   - the statement signs a procedure, inputs, result, and limitations;
+ *   - it does NOT authorize an action;
+ *   - it does NOT certify business correctness;
+ *   - acceptance is by a relying party pinning the external verifier key.
+ */
+import crypto from 'node:crypto';
+// In-package canonicalize (byte-identical to lib/canonical-json.js): reports must
+// never import outside the package root or the published tarball cannot resolve it.
+import { canonicalize } from '../execution-binding.js';
+export const EXTERNAL_VERIFICATION_STATEMENT_VERSION = 'EP-EXTERNAL-VERIFICATION-STATEMENT-v1';
+export const EXTERNAL_VERIFICATION_DOMAIN = 'EP-EXTERNAL-VERIFICATION-STATEMENT-v1\0';
+const SHA256_RE = /^sha256:[0-9a-f]{64}$/i;
+function sha256hex(bytes) {
+    return crypto.createHash('sha256').update(bytes).digest('hex');
+}
+function publicKeyToB64u(key) {
+    return crypto.createPublicKey(key).export({ type: 'spki', format: 'der' }).toString('base64url');
+}
+function keyIdFor(publicKeyB64u) {
+    return `ep:external-verifier-key:sha256:${sha256hex(Buffer.from(publicKeyB64u, 'base64url')).slice(0, 16)}`;
+}
+function signingBytes(unsignedStatement) {
+    return Buffer.from(EXTERNAL_VERIFICATION_DOMAIN + canonicalize(unsignedStatement), 'utf8');
+}
+function unsigned(statement) {
+    if (!statement || typeof statement !== 'object' || Array.isArray(statement)) {
+        throw new Error('statement must be an object');
+    }
+    const { signature: _signature, ...body } = statement;
+    return body;
+}
+/** Digest of the signed statement body, excluding the signature envelope. */
+export function externalVerificationDigest(statement) {
+    return `sha256:${sha256hex(signingBytes(unsigned(statement)))}`;
+}
+function normalizeChecks(checks) {
+    if (!Array.isArray(checks))
+        return [];
+    return checks.map((c) => ({
+        id: String(c?.id ?? ''),
+        ok: c?.ok === true,
+        ...(c?.detail !== undefined ? { detail: c.detail } : {}),
+    })).filter((c) => c.id);
+}
+/**
+ * Build and sign an external-verifier statement.
+ *
+ * @param {object} args
+ * @param {object} args.verifier {id, name?, organization?}
+ * @param {object} args.subject  what was checked, e.g. {kind:'evidence_log', head:'sha256:...'}
+ * @param {object} args.procedure {id, version?, tool?, command?}
+ * @param {object} args.result {status, checks?, artifact_digest?}
+ * @param {object} [args.inputs] stable digests/ids the procedure consumed
+ * @param {string[]} [args.limitations] honest non-claims
+ * @param {string|number} [args.generated_at] ISO or epoch millis
+ * @param {crypto.KeyObject} privateKey Ed25519 private key
+ */
+export function signExternalVerificationStatement(args, privateKey) {
+    if (!privateKey)
+        throw new Error('privateKey is required');
+    const generatedAt = args?.generated_at !== undefined
+        ? new Date(args.generated_at).toISOString()
+        : new Date().toISOString();
+    const publicKey = publicKeyToB64u(privateKey);
+    const body = {
+        '@version': EXTERNAL_VERIFICATION_STATEMENT_VERSION,
+        generated_at: generatedAt,
+        verifier: {
+            id: args?.verifier?.id ?? keyIdFor(publicKey),
+            ...(args?.verifier?.name ? { name: args.verifier.name } : {}),
+            ...(args?.verifier?.organization ? { organization: args.verifier.organization } : {}),
+        },
+        subject: args?.subject ?? {},
+        procedure: args?.procedure ?? {},
+        inputs: args?.inputs ?? {},
+        result: {
+            status: String(args?.result?.status ?? 'unknown'),
+            checks: normalizeChecks(args?.result?.checks),
+            ...(args?.result?.artifact_digest ? { artifact_digest: args.result.artifact_digest } : {}),
+        },
+        limitations: Array.isArray(args?.limitations) && args.limitations.length
+            ? args.limitations.map(String)
+            : [
+                'This statement records the external verifier procedure and result; it does not authorize the action.',
+                'It does not certify business correctness, legal compliance, or human wisdom.',
+                'Acceptance depends on the relying party pinning the verifier key out of band.',
+                'The statement carries no expiry and no consumer binding; it is replayable verbatim, and generated_at is asserted by the signer, not verified.',
+            ],
+    };
+    const digest = externalVerificationDigest(body);
+    const sig = crypto.sign(null, signingBytes(body), privateKey).toString('base64url');
+    return Object.freeze({
+        ...body,
+        signature: {
+            algorithm: 'Ed25519',
+            key_id: keyIdFor(publicKey),
+            public_key: publicKey,
+            statement_digest: digest,
+            signature_b64u: sig,
+        },
+    });
+}
+/**
+ * Verify a signed external-verifier statement against pinned verifier keys.
+ *
+ * @param {object} statement
+ * @param {{pinnedVerifierKeys?:Array<{verifier_id?:string,key_id?:string,public_key:string}>}} [opts]
+ */
+export function verifyExternalVerificationStatement(statement, opts = {}) {
+    const fail = (reason, extra = {}) => ({
+        verified: false,
+        accepted: false,
+        checks: {
+            version: statement?.['@version'] === EXTERNAL_VERIFICATION_STATEMENT_VERSION,
+            signature: false,
+            pinned_verifier_key: false,
+            statement_digest: false,
+        },
+        reason,
+        ...extra,
+    });
+    if (statement?.['@version'] !== EXTERNAL_VERIFICATION_STATEMENT_VERSION) {
+        return fail('unsupported_version');
+    }
+    const sig = statement.signature;
+    if (!sig || sig.algorithm !== 'Ed25519' || typeof sig.public_key !== 'string' || typeof sig.signature_b64u !== 'string') {
+        return fail('signature_missing_or_malformed');
+    }
+    if (typeof sig.statement_digest !== 'string' || !SHA256_RE.test(sig.statement_digest)) {
+        return fail('statement_digest_missing_or_malformed');
+    }
+    let digest;
+    try {
+        digest = externalVerificationDigest(statement);
+    }
+    catch {
+        return fail('statement_uncanonicalizable');
+    }
+    if (digest !== sig.statement_digest) {
+        return fail('statement_digest_mismatch', { statement_digest: digest });
+    }
+    const pinned = Array.isArray(opts.pinnedVerifierKeys) ? opts.pinnedVerifierKeys : [];
+    const verifierId = statement.verifier?.id ?? null;
+    // key_id is always DERIVED from the carried public key. The envelope's key_id is
+    // outside the signed bytes, so it is attacker-malleable; if present it must match
+    // the derived value or the statement is refused.
+    const keyId = keyIdFor(sig.public_key);
+    if (sig.key_id !== undefined && sig.key_id !== keyId) {
+        return fail('key_id_mismatch', { statement_digest: digest });
+    }
+    // A pin grants an identity, not just a key: every usable pin entry must name the
+    // verifier_id it vouches for. A pin that matches the key but omits verifier_id
+    // (or names a different one) never binds the statement's claimed identity.
+    const keyMatched = pinned.filter((k) => k?.public_key === sig.public_key
+        && (k.key_id === undefined || k.key_id === keyId));
+    const pin = keyMatched.find((k) => typeof k.verifier_id === 'string' && k.verifier_id === verifierId);
+    if (!pin) {
+        return {
+            verified: false,
+            accepted: false,
+            checks: { version: true, signature: false, pinned_verifier_key: false, statement_digest: true },
+            reason: keyMatched.length ? 'pin_missing_or_mismatched_verifier_id' : 'verifier_key_not_pinned',
+            statement_digest: digest,
+        };
+    }
+    let ok = false;
+    try {
+        const publicKey = crypto.createPublicKey({ key: Buffer.from(sig.public_key, 'base64url'), type: 'spki', format: 'der' });
+        ok = crypto.verify(null, signingBytes(unsigned(statement)), publicKey, Buffer.from(sig.signature_b64u, 'base64url'));
+    }
+    catch {
+        ok = false;
+    }
+    if (!ok) {
+        return {
+            verified: false,
+            accepted: false,
+            checks: { version: true, signature: false, pinned_verifier_key: true, statement_digest: true },
+            reason: 'signature_invalid',
+            statement_digest: digest,
+        };
+    }
+    return {
+        verified: true,
+        accepted: true,
+        checks: { version: true, signature: true, pinned_verifier_key: true, statement_digest: true },
+        verifier_id: verifierId,
+        key_id: keyId,
+        statement_digest: digest,
+    };
+}
+export default {
+    EXTERNAL_VERIFICATION_STATEMENT_VERSION,
+    EXTERNAL_VERIFICATION_DOMAIN,
+    externalVerificationDigest,
+    signExternalVerificationStatement,
+    verifyExternalVerificationStatement,
+};
+//# sourceMappingURL=external-verification.js.map

package/dist/reports/external-verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-verification.js","sourceRoot":"","sources":["../../src/reports/external-verification.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;;;;;;GAaG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,kFAAkF;AAClF,oFAAoF;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,CAAC,MAAM,uCAAuC,GAAG,uCAAuC,CAAC;AAC/F,MAAM,CAAC,MAAM,4BAA4B,GAAG,yCAAyC,CAAC;AAEtF,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAE3C,SAAS,SAAS,CAAC,KAAK;IACtB,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,GAAG;IAC1B,OAAO,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,QAAQ,CAAC,aAAa;IAC7B,OAAO,mCAAmC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC9G,CAAC;AAED,SAAS,YAAY,CAAC,iBAAiB;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,4BAA4B,GAAG,YAAY,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,QAAQ,CAAC,SAAS;IACzB,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,0BAA0B,CAAC,SAAS;IAClD,OAAO,UAAU,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,eAAe,CAAC,MAAM;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,EAAE,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;QACvB,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,IAAI;QAClB,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iCAAiC,CAAC,IAAI,EAAE,UAAU;IAChE,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,IAAI,EAAE,YAAY,KAAK,SAAS;QAClD,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;QAC3C,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG;QACX,UAAU,EAAE,uCAAuC;QACnD,YAAY,EAAE,WAAW;QACzB,QAAQ,EAAE;YACR,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,QAAQ,CAAC,SAAS,CAAC;YAC7C,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtF;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE;QAC5B,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,EAAE;QAChC,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE;QAC1B,MAAM,EAAE;YACN,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,SAAS,CAAC;YACjD,MAAM,EAAE,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC;YAC7C,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3F;QACD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM;YACtE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;YAC9B,CAAC,CAAC;gBACA,sGAAsG;gBACtG,8EAA8E;gBAC9E,+EAA+E;gBAC/E,+IAA+I;aAChJ;KACJ,CAAC;IAEF,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,IAAI;QACP,SAAS,EAAE;YACT,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC;YAC3B,UAAU,EAAE,SAAS;YACrB,gBAAgB,EAAE,MAAM;YACxB,cAAc,EAAE,GAAG;SACpB;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mCAAmC,CAAC,SAAS,EAAE,OAE3D,EAAE;IASJ,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACpC,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE;YACN,OAAO,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,KAAK,uCAAuC;YAC5E,SAAS,EAAE,KAAK;YAChB,mBAAmB,EAAE,KAAK;YAC1B,gBAAgB,EAAE,KAAK;SACxB;QACD,MAAM;QACN,GAAG,KAAK;KACT,CAAC,CAAC;IAEH,IAAI,SAAS,EAAE,CAAC,UAAU,CAAC,KAAK,uCAAuC,EAAE,CAAC;QACxE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC;IAChC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QACxH,OAAO,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACtF,OAAO,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,2BAA2B,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC;IAClD,iFAAiF;IACjF,kFAAkF;IAClF,iDAAiD;IACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,iBAAiB,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,iFAAiF;IACjF,+EAA+E;IAC/E,2EAA2E;IAC3E,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,GAAG,CAAC,UAAU;WACnE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC;IACtG,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE;YAC/F,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,yBAAyB;YAC/F,gBAAgB,EAAE,MAAM;SACzB,CAAC;IACJ,CAAC;IAED,IAAI,EAAE,GAAG,KAAK,CAAC;IACf,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACzH,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC;IACvH,CAAC;IAAC,MAAM,CAAC;QACP,EAAE,GAAG,KAAK,CAAC;IACb,CAAC;IACD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;YAC9F,MAAM,EAAE,mBAAmB;YAC3B,gBAAgB,EAAE,MAAM;SACzB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;QAC7F,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,KAAK;QACb,gBAAgB,EAAE,MAAM;KACzB,CAAC;AACJ,CAAC;AAED,eAAe;IACb,uCAAuC;IACvC,4BAA4B;IAC5B,0BAA0B;IAC1B,iCAAiC;IACjC,mCAAmC;CACpC,CAAC"}

package/dist/reports/reperform.d.ts

@@ -0,0 +1,122 @@
+export declare const REPERFORMANCE_VERSION = "EP-GATE-REPERFORMANCE-v1";
+/**
+ * Re-perform the evidence: rebuild the chain, re-verify carried cryptographic
+ * material, recompute the counts. Async because the chain is rebuilt through
+ * the evidence log's own (async) record().
+ *
+ * The entries MUST be the complete log from genesis (`evidence.all()` or a
+ * full export). A partial slice fails the chain (fail closed) because its
+ * first link cannot chain from 'genesis'.
+ *
+ * Chain method — drives evidence.js's REAL verify(), twice over:
+ *   1. every supplied entry body (its own seq/prev_hash included, its hash
+ *      stripped) is re-recorded into a fresh createEvidenceLog(), which
+ *      recomputes the canonical-JSON sha256 for that exact body; a recomputed
+ *      hash that differs from the SUPPLIED hash is a tampered/forged entry —
+ *      broken from that point;
+ *   2. the rebuilt log's own verify() then walks the whole chain, catching
+ *      link-level attacks the per-entry recompute cannot (a removed entry, or
+ *      an entry rewritten WITH a consistently recomputed hash — its successor's
+ *      prev_hash no longer matches).
+ *
+ * @param {Array<object>} entries  the full evidence log (evidence.all())
+ * @param {object} [o]
+ * @param {string[]} [o.issuerKeys=[]]  pinned base64url SPKI issuer keys, sourced
+ *   by the AUDITOR out of band — never from the entries themselves
+ * @param {number|function} [o.now=Date.now]  clock for generated_at (pin for determinism)
+ * @param {object} [o.approverKeys={}] auditor-pinned identity-bound approver keys
+ * @param {string|null} [o.rpId] bind carried WebAuthn assertions to this relying-party id
+ * @param {string[]} [o.allowedOrigins=[]] exact accepted WebAuthn origins
+ * @param {object} [o.quorumPolicy] auditor-pinned global organizational quorum rule
+ * @param {object} [o.quorumPolicies] action_type -> auditor-pinned quorum rule
+ * @returns {Promise<object>} EP-GATE-REPERFORMANCE-v1 document:
+ *   { chain: {ok, entries, head}, receipts: {reverified, failed, not_reverifiable},
+ *     counts: {allows, denies, replays_blocked, by_action_type}, ... }
+ */
+export declare function reperformEvidence(entries?: any[], { issuerKeys, approverKeys, now, rpId, allowedOrigins, quorumPolicy, quorumPolicies, }?: {
+    issuerKeys?: string[];
+    approverKeys?: Record<string, any>;
+    now?: number | (() => number);
+    rpId?: string | null;
+    allowedOrigins?: string[];
+    quorumPolicy?: any;
+    quorumPolicies?: Record<string, any>;
+}): Promise<{
+    '@version': string;
+    product: string;
+    generated_at: string;
+    honesty: {
+        reperforms: string;
+        does_not_establish: string[];
+        status: string;
+    };
+    input: {
+        entries_supplied: number;
+        issuer_keys_pinned: number;
+        approver_keys_pinned: number;
+        relying_party_scope_pinned: boolean;
+        quorum_policies_pinned: number;
+        expects: string;
+    };
+    chain: {
+        broken_at?: number | null | undefined;
+        broken_seq?: number | null | undefined;
+        reason?: string | undefined;
+        ok: boolean;
+        entries: number;
+        head: string | null;
+    };
+    receipts: {
+        reverified: number;
+        failed: {
+            hash: string | null;
+            reason: string;
+        }[];
+        not_reverifiable: number;
+        no_receipt_presented: number;
+    };
+    counts: {
+        allows: number;
+        denies: number;
+        replays_blocked: number;
+        by_action_type: {};
+    };
+    integrity_warnings: {
+        index: number;
+        reason: string;
+    }[];
+}>;
+/**
+ * Diff recomputed counts against a reported pack — the auditor's tie-out.
+ *
+ * Accepts an EP-GATE-USAGE-v1 pack (meterUsage output or the signed-ready
+ * buildUsageStatement body) or an EP-GATE-UNDERWRITER-ATTESTATION-v1 pack.
+ * Only the OVERLAPPING NUMERIC fields are compared; an unknown pack @version
+ * is refused (fail closed), never fuzzily matched. A reported field that is
+ * missing or non-numeric is itself a named drift — a stripped pack can never
+ * silently match.
+ *
+ * The comparison is meaningful only when the recomputation ran over exactly
+ * the entries the reported pack was built from (same slice, same window);
+ * scoping the slice is the auditor's procedure, not this function's.
+ *
+ * @param {object} recomputed  reperformEvidence() result (or its .counts)
+ * @param {object} reportedPack  usage or underwriter pack
+ * @returns {{match: boolean, pack_version: string, drift: Array<{field, reported, recomputed}>}}
+ */
+export declare function compareToReported(recomputed: any, reportedPack: any): {
+    match: boolean;
+    pack_version: any;
+    drift: {
+        field: string;
+        reported: any;
+        recomputed: any;
+    }[];
+};
+declare const _default: {
+    REPERFORMANCE_VERSION: string;
+    reperformEvidence: typeof reperformEvidence;
+    compareToReported: typeof compareToReported;
+};
+export default _default;
+//# sourceMappingURL=reperform.d.ts.map

package/dist/reports/reperform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reperform.d.ts","sourceRoot":"","sources":["../../src/reports/reperform.ts"],"names":[],"mappings":"AA4CA,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AA6HhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,GAAE,GAAG,EAAO,EAAE,EAC3D,UAAe,EACf,YAAiB,EACjB,GAAc,EACd,IAAW,EACX,cAAmB,EACnB,YAAmB,EACnB,cAAmB,GACpB,GAAE;IACD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE,GAAG,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACjC;;;;;;;;;;;;;;;;;;;;;;;;;;oBAuCU,MAAM;gBACV;YAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,EAAE;0BAC/B,MAAM;8BACF,MAAM;;;;;;;;;eAEL,MAAM;gBAAU,MAAM;;GA+FhD;AAoBD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,KAAA,EAAE,YAAY,KAAA;;;;eAMlC,MAAM;kBAAY,GAAG;oBAAc,GAAG;;EAoC7D;;;;;;AAED,wBAA+E"}