@imagina-build/ias-cli 0.0.0 → 0.1.1

package/shared/vault/test-vectors/ias-vault-2/runners.json

@@ -0,0 +1,580 @@
+{
+  "format": "ias-vault-2",
+  "description": "The list of authorised runners (ias-vault-2/runners), signed by the team: lists are good ones, each with its signedText and the runners it gives; malformed must be rejected with code (validateRunnerList); tampered are well formed but their signature does not verify.",
+  "warning": "Test vectors: the keys are public. Never use them for anything else.",
+  "lists": [
+    {
+      "name": "first-runner",
+      "description": "runner-a is authorised: the first list.",
+      "runners": [
+        "runner-a"
+      ],
+      "signedText": "ias-vault-2\nrunners\nkj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y\n1\n1\nOHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk\nA8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 1,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "YQzYGFt1x5UHn8aZWTAlut3hEInOZYfYBKmgjQO9Zt3ZWBDEBJVhmH9TWYFcXKA2-fjQFJSj4wxDwXYK3sxiBg"
+        }
+      },
+      "verified": {
+        "serial": 1,
+        "runners": [
+          {
+            "kind": "runner",
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "publicKey": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          }
+        ]
+      }
+    },
+    {
+      "name": "second-runner",
+      "description": "runner-b is authorised too.",
+      "runners": [
+        "runner-a",
+        "runner-b"
+      ],
+      "signedText": "ias-vault-2\nrunners\nkj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y\n2\n2\nOHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk\nA8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg\n3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg\nBwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 2,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        }
+      },
+      "verified": {
+        "serial": 2,
+        "runners": [
+          {
+            "kind": "runner",
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "publicKey": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kind": "runner",
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "publicKey": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ]
+      }
+    },
+    {
+      "name": "runner-a-revoked",
+      "description": "runner-a is revoked: the list goes on without it, with a higher serial.",
+      "runners": [
+        "runner-b"
+      ],
+      "signedText": "ias-vault-2\nrunners\nkj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y\n3\n1\n3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg\nBwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 3,
+        "runners": [
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "79Xf0_23NjH0VepTXxmTdo3ccWpaGqPJUalnh_Laf3DW_9xE_Awk0KFcLubNeT6BXFnJQZUXFQ0pRzEo4kG5AA"
+        }
+      },
+      "verified": {
+        "serial": 3,
+        "runners": [
+          {
+            "kind": "runner",
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "publicKey": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ]
+      }
+    },
+    {
+      "name": "empty",
+      "description": "Every runner revoked: an empty list is still signed.",
+      "runners": [],
+      "signedText": "ias-vault-2\nrunners\nkj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y\n4\n0",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 4,
+        "runners": [],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "YOhCGLORJCM7rp6dUuGlxe6F0vSDC8AsCRYR9XaOhjXzQhfrar1Tkiscy0p4JFM1UdCpuYqXY-gI0ljbK6bNCQ"
+        }
+      },
+      "verified": {
+        "serial": 4,
+        "runners": []
+      }
+    }
+  ],
+  "malformed": [
+    {
+      "name": "array",
+      "code": "runners",
+      "description": "A list instead of an object.",
+      "list": [
+        {
+          "format": "ias-vault-2/runners",
+          "serial": 2,
+          "runners": [
+            {
+              "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+              "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+            },
+            {
+              "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+              "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+            }
+          ],
+          "signature": {
+            "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+            "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+          }
+        }
+      ]
+    },
+    {
+      "name": "other-format",
+      "code": "runners.format",
+      "description": "Another format.",
+      "list": {
+        "format": "ias-vault-1/runners",
+        "serial": 2,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        }
+      }
+    },
+    {
+      "name": "missing-signature",
+      "code": "runners.fields",
+      "description": "No signature.",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 2,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ]
+      }
+    },
+    {
+      "name": "extra-field",
+      "code": "runners.fields",
+      "description": "A field besides format, serial, runners and signature.",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 2,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        },
+        "issued_at": "2026-10-21T10:00:00+00:00"
+      }
+    },
+    {
+      "name": "serial-zero",
+      "code": "runners.serial",
+      "description": "Serial 0.",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 0,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        }
+      }
+    },
+    {
+      "name": "serial-string",
+      "code": "runners.serial",
+      "description": "The serial as a string.",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": "2",
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        }
+      }
+    },
+    {
+      "name": "runners-object",
+      "code": "runners.list",
+      "description": "The runners as an object keyed by kid.",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 2,
+        "runners": {
+          "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk": {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg": {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        },
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        }
+      }
+    },
+    {
+      "name": "runner-name-field",
+      "code": "runner",
+      "description": "A runner with a name: names are the server's, the list is only keys.",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 2,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg",
+            "name": "Mac mini"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        }
+      }
+    },
+    {
+      "name": "runner-kid-padded",
+      "code": "runner.kid",
+      "description": "Padding after a kid.",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 2,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk=",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        }
+      }
+    },
+    {
+      "name": "runner-public-key-31-bytes",
+      "code": "runner.public_key",
+      "description": "A 31-byte public key.",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 2,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "xjW5UZFcS-hrXHMY2-UsEVynLntQ7YajZXlZ2OERSA"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        }
+      }
+    },
+    {
+      "name": "runner-kid-of-other-key",
+      "code": "runner.key",
+      "description": "The kid of runner-b beside the public key of runner-a.",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 2,
+        "runners": [
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        }
+      }
+    },
+    {
+      "name": "runner-duplicate",
+      "code": "runner.duplicate",
+      "description": "The same runner twice.",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 2,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          },
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        }
+      }
+    },
+    {
+      "name": "signature-sig-63-bytes",
+      "code": "signature.sig",
+      "description": "A 63-byte signature.",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 2,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "URLAGoY4ldNyhmp__BmkBpHO42mYbROMiskP15bmHjJqJZYgucE_bgoy5uZjYKfd6eFv1hPXz-nZQwtYq8QN"
+        }
+      }
+    },
+    {
+      "name": "signed-by-another-key",
+      "code": "signature.unknown",
+      "description": "The list signed by another team's key with its own kid (options.signingKid is the team's).",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 2,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kid": "bZCIXUHuqtQwwwX8BID-dN94qaZhvJTcx-q_xkV7qsA",
+            "public_key": "6L8x6hVnLNSV2ApoexpOCCc2CxTRdBR23DF26x0JpBc"
+          }
+        ],
+        "signature": {
+          "kid": "GS0AJ9GoNBRiq6UFVPBnRxjovYsP5dJDy9Klz1AguIc",
+          "sig": "R9v4irzU5AfiKfFPHFXr0iTaWA4NnntY8bvZ9e600m6xJYWQqlf_rwt2RmYMvwPgXrobCiEgldvn8yyFp43HBg"
+        }
+      },
+      "options": {
+        "signingKid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y"
+      }
+    }
+  ],
+  "tampered": [
+    {
+      "name": "runner-added-by-the-server",
+      "description": "outsider added by the server without signing: the CLI must never seal for it.",
+      "error": "signature-invalid",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 2,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          },
+          {
+            "kid": "bZCIXUHuqtQwwwX8BID-dN94qaZhvJTcx-q_xkV7qsA",
+            "public_key": "6L8x6hVnLNSV2ApoexpOCCc2CxTRdBR23DF26x0JpBc"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        }
+      }
+    },
+    {
+      "name": "runner-removed-without-signing",
+      "description": "runner-b removed without signing.",
+      "error": "signature-invalid",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 2,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        }
+      }
+    },
+    {
+      "name": "serial-raised",
+      "description": "The serial raised without signing.",
+      "error": "signature-invalid",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 9,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        }
+      }
+    },
+    {
+      "name": "runners-reordered",
+      "description": "The two runners in the other order.",
+      "error": "signature-invalid",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 2,
+        "runners": [
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "public_key": "BwByHcoYIaRS9Afd6N766tpi_jc3J0eeHDQkOfGbF1w"
+          },
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "FVESwBqGOJXTcoZqf_wZpAaRzuNpmG0TjIrJD9eW5h4yaiWWILnBP24KMubmY2Cn3enhb9YT18_p2UMLWKvEDQ"
+        }
+      }
+    },
+    {
+      "name": "forged-under-the-team-kid",
+      "description": "The list with outsider signed by another key under the team's kid.",
+      "error": "signature-invalid",
+      "list": {
+        "format": "ias-vault-2/runners",
+        "serial": 3,
+        "runners": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "public_key": "A8Y1uVGRXEvoa1xzGNvlLBFcpy57UO2Go2V5WdjhEUg"
+          },
+          {
+            "kid": "bZCIXUHuqtQwwwX8BID-dN94qaZhvJTcx-q_xkV7qsA",
+            "public_key": "6L8x6hVnLNSV2ApoexpOCCc2CxTRdBR23DF26x0JpBc"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "WRCBQmslkYwq_MVXHOIO9T7S8F7Yu7grzpWINg8JRbp0qrla-T09d4iM9vfFKCryjxuWWUJJZ5acF9uTqht3Aw"
+        }
+      }
+    }
+  ]
+}