@mikeargento/bitgraph 1.1.0 → 1.1.1

package/dist/__tests__/audit-witness.test.js

@@ -0,0 +1,308 @@
+// Copyright (c) Mike Argento. All rights reserved. See LICENSE.
+/**
+ * Anchor witness verification tests (bundle spec section 10.3).
+ *
+ * The synthetic header is a 20-item RLP list with the block number at
+ * index 8 and the timestamp at index 11; its Keccak-256 hash is the
+ * "block hash", the anchor's signed attribution.message is that hash,
+ * and the anchor's artifact digest is SHA-256 over the hash STRING,
+ * exactly like bitcoin-anchor.ts. Full verification yields the header
+ * timestamp; every single-point corruption fails with its own stable
+ * reason and confers nothing.
+ */
+import { describe, it } from "node:test";
+import * as assert from "node:assert/strict";
+import { keccak_256 } from "@noble/hashes/sha3";
+import { sha256 } from "@noble/hashes/sha256";
+import { identifyAnchors, ingestBundle, verifyAnchorWitness, verifyAnchorWitnesses, verifyObservedProofs, } from "@mikeargento/bitgraph-audit";
+import { b64, makeAnchorProof, makeEthereumHeader, makeTempDir, proofJson, utf8, witnessJson, writeBundleDir, } from "./audit-fixtures.js";
+const BLOCK_NUMBER = 24800448;
+const TIMESTAMP = 1750000000;
+const HEADER = makeEthereumHeader({ blockNumber: BLOCK_NUMBER, timestamp: TIMESTAMP });
+const BLOCK_HASH = `0x${Buffer.from(keccak_256(HEADER.headerBytes)).toString("hex")}`;
+async function pipeline(files) {
+    const dir = await makeTempDir("bg-audit-witness-");
+    await writeBundleDir(dir, files);
+    const ingest = await ingestBundle(dir);
+    await verifyObservedProofs(ingest);
+    return { ingest, anchors: identifyAnchors(ingest) };
+}
+function goodWitness() {
+    return witnessJson({
+        headerRlpHex: HEADER.headerRlpHex,
+        blockNumber: BLOCK_NUMBER,
+        blockHash: BLOCK_HASH,
+        network: "ethereum-mainnet",
+    });
+}
+describe("audit witness: full verification", () => {
+    it("passes every step and yields the header timestamp as the only wall-clock evidence", async () => {
+        const anchor = await makeAnchorProof({
+            blockHash: BLOCK_HASH,
+            blockNumber: String(BLOCK_NUMBER),
+            epochId: "E-W1",
+            counter: "4",
+            slotCounter: "3",
+        });
+        const { ingest, anchors } = await pipeline({
+            "proofs/anchor.json": proofJson(anchor.proof),
+            "witnesses/w.json": goodWitness(),
+        });
+        const analysis = await verifyAnchorWitnesses(ingest, anchors);
+        assert.equal(analysis.outcomes.length, 1);
+        const outcome = analysis.outcomes[0];
+        assert.equal(outcome.verified, true);
+        assert.equal(outcome.anchorProofHash, anchor.proofHash);
+        assert.equal(outcome.computedBlockHash, BLOCK_HASH);
+        assert.equal(outcome.blockNumber, String(BLOCK_NUMBER));
+        assert.equal(outcome.timestamp, TIMESTAMP);
+        assert.equal(outcome.reason, undefined);
+        assert.equal(analysis.findings.length, 0);
+    });
+    it("compares the hash case-insensitively but binds the digest to the exact signed string", async () => {
+        // The anchor signed an UPPERCASE hash string; the digest covers that
+        // exact string. Step 3 lowercases for comparison, step 4 does not.
+        const upper = `0x${BLOCK_HASH.slice(2).toUpperCase()}`;
+        const anchor = await makeAnchorProof({
+            blockHash: upper,
+            blockNumber: String(BLOCK_NUMBER),
+            epochId: "E-W2",
+            counter: "2",
+        });
+        const { ingest, anchors } = await pipeline({
+            "proofs/anchor.json": proofJson(anchor.proof),
+            "witnesses/w.json": goodWitness(),
+        });
+        const analysis = await verifyAnchorWitnesses(ingest, anchors);
+        assert.equal(analysis.outcomes.length, 1);
+        assert.equal(analysis.outcomes[0].verified, true);
+        assert.equal(analysis.outcomes[0].timestamp, TIMESTAMP);
+    });
+});
+describe("audit witness: single-point corruptions fail with distinct stable reasons", () => {
+    it("wrong claimed blockHash: witness-claimed-hash-mismatch", async () => {
+        const anchor = await makeAnchorProof({
+            blockHash: BLOCK_HASH,
+            blockNumber: String(BLOCK_NUMBER),
+            epochId: "E-W3",
+            counter: "2",
+        });
+        const wrongClaim = `0x${"ab".repeat(32)}`;
+        const { ingest, anchors } = await pipeline({
+            "proofs/anchor.json": proofJson(anchor.proof),
+            "witnesses/w.json": witnessJson({
+                headerRlpHex: HEADER.headerRlpHex,
+                blockNumber: BLOCK_NUMBER,
+                blockHash: wrongClaim,
+            }),
+        });
+        const analysis = await verifyAnchorWitnesses(ingest, anchors);
+        const outcome = analysis.outcomes[0];
+        assert.equal(outcome.verified, false);
+        assert.equal(outcome.reason, "witness-claimed-hash-mismatch");
+        assert.equal(outcome.timestamp, undefined, "a rejected witness confers nothing");
+        assert.ok(analysis.findings.some((f) => f.code === "witness-claimed-hash-mismatch"));
+    });
+    it("wrong artifact digest: witness-digest-mismatch", async () => {
+        // Validly signed anchor whose digest covers a different string, so the
+        // proof itself verifies but the message-to-digest binding fails.
+        const anchor = await makeAnchorProof({
+            blockHash: BLOCK_HASH,
+            blockNumber: String(BLOCK_NUMBER),
+            epochId: "E-W4",
+            counter: "2",
+            digestB64: b64(sha256(utf8("some other committed artifact"))),
+        });
+        const { ingest, anchors } = await pipeline({
+            "proofs/anchor.json": proofJson(anchor.proof),
+            "witnesses/w.json": goodWitness(),
+        });
+        const analysis = await verifyAnchorWitnesses(ingest, anchors);
+        const outcome = analysis.outcomes[0];
+        assert.equal(outcome.verified, false);
+        assert.equal(outcome.reason, "witness-digest-mismatch");
+        assert.equal(outcome.timestamp, undefined);
+    });
+    it("wrong claimed blockNumber: witness-block-number-mismatch", async () => {
+        const anchor = await makeAnchorProof({
+            blockHash: BLOCK_HASH,
+            blockNumber: String(BLOCK_NUMBER),
+            epochId: "E-W5",
+            counter: "2",
+        });
+        const { ingest, anchors } = await pipeline({
+            "proofs/anchor.json": proofJson(anchor.proof),
+            "witnesses/w.json": witnessJson({
+                headerRlpHex: HEADER.headerRlpHex,
+                blockNumber: BLOCK_NUMBER + 1,
+                blockHash: BLOCK_HASH,
+            }),
+        });
+        const analysis = await verifyAnchorWitnesses(ingest, anchors);
+        const outcome = analysis.outcomes[0];
+        assert.equal(outcome.verified, false);
+        assert.equal(outcome.reason, "witness-block-number-mismatch");
+        assert.match(outcome.detail, /witness claims blockNumber/);
+    });
+    it("signed Etherscan URL disagreeing with the header: witness-block-number-mismatch", async () => {
+        const anchor = await makeAnchorProof({
+            blockHash: BLOCK_HASH,
+            blockNumber: String(BLOCK_NUMBER + 7),
+            epochId: "E-W6",
+            counter: "2",
+        });
+        const { ingest, anchors } = await pipeline({
+            "proofs/anchor.json": proofJson(anchor.proof),
+            "witnesses/w.json": goodWitness(),
+        });
+        const analysis = await verifyAnchorWitnesses(ingest, anchors);
+        const outcome = analysis.outcomes[0];
+        assert.equal(outcome.verified, false);
+        assert.equal(outcome.reason, "witness-block-number-mismatch");
+        assert.match(outcome.detail, /Etherscan URL/);
+    });
+    it("tampered RLP header bytes: witness-hash-mismatch", async () => {
+        const anchor = await makeAnchorProof({
+            blockHash: BLOCK_HASH,
+            blockNumber: String(BLOCK_NUMBER),
+            epochId: "E-W7",
+            counter: "2",
+        });
+        // Flip content bytes in the middle: still well-formed RLP, different
+        // Keccak hash. The witness still reaches its intended anchor through
+        // the claimed hash and fails loudly at step 3.
+        const tampered = HEADER.headerRlpHex.slice(0, 40) +
+            (HEADER.headerRlpHex[40] === "f" ? "e" : "f") +
+            HEADER.headerRlpHex.slice(41);
+        const { ingest, anchors } = await pipeline({
+            "proofs/anchor.json": proofJson(anchor.proof),
+            "witnesses/w.json": witnessJson({
+                headerRlpHex: tampered,
+                blockNumber: BLOCK_NUMBER,
+                blockHash: BLOCK_HASH,
+            }),
+        });
+        const analysis = await verifyAnchorWitnesses(ingest, anchors);
+        const outcome = analysis.outcomes[0];
+        assert.equal(outcome.verified, false);
+        assert.equal(outcome.reason, "witness-hash-mismatch");
+        assert.equal(outcome.timestamp, undefined);
+    });
+});
+describe("audit witness: malformed and unusable witnesses", () => {
+    it("field violations fail with witness-malformed", async () => {
+        const anchor = await makeAnchorProof({
+            blockHash: BLOCK_HASH,
+            blockNumber: String(BLOCK_NUMBER),
+            epochId: "E-W8",
+            counter: "2",
+        });
+        const { ingest, anchors } = await pipeline({
+            "proofs/anchor.json": proofJson(anchor.proof),
+            "witnesses/no-header.json": witnessJson({
+                blockNumber: BLOCK_NUMBER,
+                blockHash: BLOCK_HASH,
+                omit: ["headerRlpHex"],
+            }),
+            "witnesses/string-number.json": witnessJson({
+                headerRlpHex: HEADER.headerRlpHex,
+                blockNumber: String(BLOCK_NUMBER),
+                blockHash: BLOCK_HASH,
+            }),
+            "witnesses/bad-hash-shape.json": witnessJson({
+                headerRlpHex: HEADER.headerRlpHex,
+                blockNumber: BLOCK_NUMBER,
+                blockHash: "28ed3639",
+            }),
+        });
+        const analysis = await verifyAnchorWitnesses(ingest, anchors);
+        assert.equal(analysis.outcomes.length, 3);
+        for (const outcome of analysis.outcomes) {
+            assert.equal(outcome.verified, false);
+            assert.equal(outcome.reason, "witness-malformed");
+            assert.equal(outcome.timestamp, undefined);
+        }
+    });
+    it("structurally invalid RLP fails with witness-rlp-invalid", async () => {
+        const anchor = await makeAnchorProof({
+            blockHash: BLOCK_HASH,
+            blockNumber: String(BLOCK_NUMBER),
+            epochId: "E-W9",
+            counter: "2",
+        });
+        const { ingest, anchors } = await pipeline({
+            "proofs/anchor.json": proofJson(anchor.proof),
+            // 0xf9 declares a long list with a 2-byte length that never arrives.
+            "witnesses/w.json": witnessJson({
+                headerRlpHex: "0xf901",
+                blockNumber: BLOCK_NUMBER,
+                blockHash: BLOCK_HASH,
+            }),
+        });
+        const analysis = await verifyAnchorWitnesses(ingest, anchors);
+        assert.equal(analysis.outcomes[0].reason, "witness-rlp-invalid");
+    });
+    it("a witness matching no anchor is reported witness-unmatched", async () => {
+        const otherHeader = makeEthereumHeader({ blockNumber: 5, timestamp: 6 });
+        const otherHash = `0x${Buffer.from(keccak_256(otherHeader.headerBytes)).toString("hex")}`;
+        const anchor = await makeAnchorProof({
+            blockHash: BLOCK_HASH,
+            blockNumber: String(BLOCK_NUMBER),
+            epochId: "E-W10",
+            counter: "2",
+        });
+        const { ingest, anchors } = await pipeline({
+            "proofs/anchor.json": proofJson(anchor.proof),
+            "witnesses/w.json": witnessJson({
+                headerRlpHex: otherHeader.headerRlpHex,
+                blockNumber: 5,
+                blockHash: otherHash,
+            }),
+        });
+        const analysis = await verifyAnchorWitnesses(ingest, anchors);
+        const outcome = analysis.outcomes[0];
+        assert.equal(outcome.verified, false);
+        assert.equal(outcome.reason, "witness-unmatched");
+        assert.equal(outcome.anchorProofHash, undefined);
+    });
+    it("a witness cannot rescue an invalid anchor: witness-anchor-invalid", async () => {
+        const anchor = await makeAnchorProof({
+            blockHash: BLOCK_HASH,
+            blockNumber: String(BLOCK_NUMBER),
+            epochId: "E-W11",
+            counter: "2",
+        });
+        // Tamper the Ed25519 signature: the canonical identity is unchanged
+        // (the signature is outside the signed body) but the proof is invalid.
+        anchor.proof.signer.signatureB64 = `AA${anchor.proof.signer.signatureB64.slice(2)}`;
+        const { ingest, anchors } = await pipeline({
+            "proofs/anchor.json": proofJson(anchor.proof),
+            "witnesses/w.json": goodWitness(),
+        });
+        const analysis = await verifyAnchorWitnesses(ingest, anchors);
+        const outcome = analysis.outcomes[0];
+        assert.equal(outcome.verified, false);
+        assert.equal(outcome.reason, "witness-anchor-invalid");
+        assert.equal(outcome.timestamp, undefined);
+    });
+});
+describe("audit witness: direct single-pair API", () => {
+    it("verifyAnchorWitness runs the full procedure against one anchor", async () => {
+        const anchor = await makeAnchorProof({
+            blockHash: BLOCK_HASH,
+            blockNumber: String(BLOCK_NUMBER),
+            epochId: "E-W12",
+            counter: "2",
+        });
+        const { ingest } = await pipeline({
+            "proofs/anchor.json": proofJson(anchor.proof),
+            "witnesses/w.json": goodWitness(),
+        });
+        const observed = ingest.proofs.find((p) => p.proofHash === anchor.proofHash);
+        const witnessFile = ingest.witnesses[0];
+        const outcome = await verifyAnchorWitness(witnessFile, observed);
+        assert.equal(outcome.verified, true);
+        assert.equal(outcome.timestamp, TIMESTAMP);
+    });
+});
+//# sourceMappingURL=audit-witness.test.js.map

package/dist/__tests__/audit-witness.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-witness.test.js","sourceRoot":"","sources":["../../src/__tests__/audit-witness.test.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EACL,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,GAAG,EACH,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,IAAI,EACJ,WAAW,EACX,cAAc,GACf,MAAM,qBAAqB,CAAC;AAE7B,MAAM,YAAY,GAAG,QAAQ,CAAC;AAC9B,MAAM,SAAS,GAAG,UAAU,CAAC;AAE7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;AACvF,MAAM,UAAU,GAAG,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAEtF,KAAK,UAAU,QAAQ,CACrB,KAA0C;IAE1C,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACnD,MAAM,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,WAAW,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,WAAW,EAAE,YAAY;QACzB,SAAS,EAAE,UAAU;QACrB,OAAO,EAAE,kBAAkB;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC;YACjC,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,GAAG;YACZ,WAAW,EAAE,GAAG;SACjB,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC;YACzC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,kBAAkB,EAAE,WAAW,EAAE;SAClC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,KAAK,GAAG,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC;YACjC,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC;YACzC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,kBAAkB,EAAE,WAAW,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2EAA2E,EAAE,GAAG,EAAE;IACzF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC;YACjC,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC;YACzC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,kBAAkB,EAAE,WAAW,CAAC;gBAC9B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,YAAY;gBACzB,SAAS,EAAE,UAAU;aACtB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,oCAAoC,CAAC,CAAC;QACjF,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC;YACjC,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC;SAC9D,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC;YACzC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,kBAAkB,EAAE,WAAW,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC;YACjC,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC;YACzC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,kBAAkB,EAAE,WAAW,CAAC;gBAC9B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,YAAY,GAAG,CAAC;gBAC7B,SAAS,EAAE,UAAU;aACtB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAgB,EAAE,4BAA4B,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;YACrC,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC;YACzC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,kBAAkB,EAAE,WAAW,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAgB,EAAE,eAAe,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC;YACjC,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QACH,qEAAqE;QACrE,qEAAqE;QACrE,+CAA+C;QAC/C,MAAM,QAAQ,GACZ,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAChC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC7C,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC;YACzC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,kBAAkB,EAAE,WAAW,CAAC;gBAC9B,YAAY,EAAE,QAAQ;gBACtB,WAAW,EAAE,YAAY;gBACzB,SAAS,EAAE,UAAU;aACtB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC/D,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC;YACjC,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC;YACzC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,0BAA0B,EAAE,WAAW,CAAC;gBACtC,WAAW,EAAE,YAAY;gBACzB,SAAS,EAAE,UAAU;gBACrB,IAAI,EAAE,CAAC,cAAc,CAAC;aACvB,CAAC;YACF,8BAA8B,EAAE,WAAW,CAAC;gBAC1C,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC;gBACjC,SAAS,EAAE,UAAU;aACtB,CAAC;YACF,+BAA+B,EAAE,WAAW,CAAC;gBAC3C,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,YAAY;gBACzB,SAAS,EAAE,UAAU;aACtB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1C,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;YAClD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC;YACjC,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC;YACzC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,qEAAqE;YACrE,kBAAkB,EAAE,WAAW,CAAC;gBAC9B,YAAY,EAAE,QAAQ;gBACtB,WAAW,EAAE,YAAY;gBACzB,SAAS,EAAE,UAAU;aACtB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,WAAW,GAAG,kBAAkB,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1F,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC;YACjC,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC;YACzC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,kBAAkB,EAAE,WAAW,CAAC;gBAC9B,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,SAAS;aACrB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC;YACjC,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QACH,oEAAoE;QACpE,uEAAuE;QACvE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC;YACzC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,kBAAkB,EAAE,WAAW,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC;YACjC,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC;YAChC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,kBAAkB,EAAE,WAAW,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAE,CAAC;QAC9E,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/chain-hash-anchor.test.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Regression: computeChainHash must exclude the anchor service's `ethereum`
+ * field so that an Ethereum anchor can be resolved as a chain predecessor.
+ *
+ * Real-data fixture. `anchor-with-ethereum-112758.json` is a live Ethereum
+ * anchor (commit 112758) exactly as it ships in an export bundle: it carries a
+ * top-level `ethereum` { blockNumber, blockHash } field that the anchor service
+ * appended AFTER the enclave signed it. `successor-112760.json` is the next
+ * proof on the chain (the BitGraph whitepaper, commit 112760); its
+ * `commit.prevB64` was computed by the enclave over the anchor as the enclave
+ * saw it — before the `ethereum` field existed.
+ *
+ * The bug (latent since the anchor service began stamping `ethereum` on
+ * 2026-04-01, exposed once the audit tool resolved prevB64 via computeChainHash
+ * on 2026-07-10): computeChainHash hashed the whole proof minus only
+ * `proofHash`, so the appended `ethereum` field poisoned the hash and no
+ * successor's prevB64 could ever match. The anchor "vanished" from the chain
+ * even though it was present in the bundle. The fix excludes `ethereum` (and
+ * any ledger/service-added field) from the chain hash.
+ */
+export {};
+//# sourceMappingURL=chain-hash-anchor.test.d.ts.map

package/dist/__tests__/chain-hash-anchor.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-hash-anchor.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/chain-hash-anchor.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG"}

package/dist/__tests__/chain-hash-anchor.test.js

@@ -0,0 +1,55 @@
+/**
+ * Regression: computeChainHash must exclude the anchor service's `ethereum`
+ * field so that an Ethereum anchor can be resolved as a chain predecessor.
+ *
+ * Real-data fixture. `anchor-with-ethereum-112758.json` is a live Ethereum
+ * anchor (commit 112758) exactly as it ships in an export bundle: it carries a
+ * top-level `ethereum` { blockNumber, blockHash } field that the anchor service
+ * appended AFTER the enclave signed it. `successor-112760.json` is the next
+ * proof on the chain (the BitGraph whitepaper, commit 112760); its
+ * `commit.prevB64` was computed by the enclave over the anchor as the enclave
+ * saw it — before the `ethereum` field existed.
+ *
+ * The bug (latent since the anchor service began stamping `ethereum` on
+ * 2026-04-01, exposed once the audit tool resolved prevB64 via computeChainHash
+ * on 2026-07-10): computeChainHash hashed the whole proof minus only
+ * `proofHash`, so the appended `ethereum` field poisoned the hash and no
+ * successor's prevB64 could ever match. The anchor "vanished" from the chain
+ * even though it was present in the bundle. The fix excludes `ethereum` (and
+ * any ledger/service-added field) from the chain hash.
+ */
+import { describe, it } from "node:test";
+import * as assert from "node:assert/strict";
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { computeChainHash } from "@mikeargento/bitgraph-verify";
+function loadFixture(name) {
+    const url = new URL(`../../src/__tests__/real-fixtures/${name}`, import.meta.url);
+    return JSON.parse(readFileSync(fileURLToPath(url), "utf8"));
+}
+describe("computeChainHash: Ethereum anchor chain link (ethereum-field regression)", () => {
+    const anchor = loadFixture("anchor-with-ethereum-112758.json");
+    const successor = loadFixture("successor-112760.json");
+    const expectedPrev = successor.commit.prevB64;
+    it("the fixture is the real shape: anchor carries a top-level ethereum field", () => {
+        assert.ok(Object.prototype.hasOwnProperty.call(anchor, "ethereum"));
+        assert.equal(anchor.commit.counter, "112758");
+        assert.equal(successor.commit.counter, "112760");
+    });
+    it("resolves the successor's prevB64 to the anchor, as exported (with ethereum)", () => {
+        // The whole point: the anchor is exported WITH the ethereum field, and its
+        // chain hash must still equal the successor's prevB64.
+        assert.equal(computeChainHash(anchor), expectedPrev);
+    });
+    it("ignores the ethereum field entirely (with === without)", () => {
+        const withoutEth = { ...anchor };
+        delete withoutEth.ethereum;
+        assert.equal(computeChainHash(anchor), computeChainHash(withoutEth));
+    });
+    it("also ignores the ledger-added proofHash field (with === without)", () => {
+        const withoutHash = { ...anchor };
+        delete withoutHash.proofHash;
+        assert.equal(computeChainHash(anchor), computeChainHash(withoutHash));
+    });
+});
+//# sourceMappingURL=chain-hash-anchor.test.js.map

package/dist/__tests__/chain-hash-anchor.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-hash-anchor.test.js","sourceRoot":"","sources":["../../src/__tests__/chain-hash-anchor.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAsB,MAAM,8BAA8B,CAAC;AAEpF,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,qCAAqC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClF,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,QAAQ,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACxF,MAAM,MAAM,GAAG,WAAW,CAAC,kCAAkC,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,WAAW,CAAC,uBAAuB,CAAC,CAAC;IACvD,MAAM,YAAY,GAAI,SAAS,CAAC,MAA8B,CAAC,OAAO,CAAC;IAEvE,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAE,MAAM,CAAC,MAA8B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAE,SAAS,CAAC,MAA8B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,2EAA2E;QAC3E,uDAAuD;QACvD,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAkC,CAAC,EAAE,YAAY,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,UAAU,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAC;QAC1D,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC3B,MAAM,CAAC,KAAK,CACV,gBAAgB,CAAC,MAAkC,CAAC,EACpD,gBAAgB,CAAC,UAAsC,CAAC,CACzD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,WAAW,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAC;QAC3D,OAAO,WAAW,CAAC,SAAS,CAAC;QAC7B,MAAM,CAAC,KAAK,CACV,gBAAgB,CAAC,MAAkC,CAAC,EACpD,gBAAgB,CAAC,WAAuC,CAAC,CAC1D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/declared-proof-fixture.d.ts

@@ -0,0 +1,66 @@
+/**
+ * The first declared recording ever made (ledger #12,010, 2026-08-18), kept
+ * as a fixture because its absence is what let two verifier bugs through that
+ * day (see dc26b5fd). A real WebAuthn assertion: origin https://bitgraph.ing,
+ * rpIdHash = SHA-256("bitgraph.ing"), flags UP|UV|BE|BS (a synced passkey).
+ * The artifact bytes are not here, so it is checked with verifyProofIntegrity.
+ * Same bytes as packages/player/src/__tests__/fixtures/declared-12010/proof.json.
+ */
+export declare const DECLARED_12010: {
+    readonly version: "bitgraph/1";
+    readonly artifact: {
+        readonly hashAlg: "sha256";
+        readonly digestB64: "szEkIOHMuIaOXlqVG9uqKvaKtmnYmklfzOjEldzFP2E=";
+    };
+    readonly commit: {
+        readonly nonceB64: "05pT2TUMA2mJ0iBsQPkOaKFIUa0i4Ta6wdNkqS3jef4=";
+        readonly counter: "12010";
+        readonly slotCounter: "12009";
+        readonly slotHashB64: "VbOoREc4tcmNwFFYmtfenUZ04LNkjP02wQN2okIi81Y=";
+        readonly epochId: "plJ+9/nhhVEvDE4X4rCjJI+zys0fIov3XT114+mQIpk=";
+        readonly prevB64: "3TzjHBZWqTMte6FE0BZ0SM7hrcRhFv29Sl4NMf/ZvBs=";
+        readonly chainId: "bitgraph:main";
+    };
+    readonly signer: {
+        readonly publicKeyB64: "tmp21VjPay+EhaMwmrFLfdjZo2KIjjT7VDqjmm27wHI=";
+        readonly signatureB64: "96dTfH4EYq1pRvS7zAhVZuiCLsfrlur0QkA4dfkRQZtbkQ8dgebEQn85TOdvvPtk2YYh9pP0k46HWrZuOOYlBg==";
+    };
+    readonly environment: {
+        readonly enforcement: "measured-tee";
+        readonly measurement: "6483cedffed74680ffb287507744a398b288c3fb943eb3f2e4fe889f8b60b3d575ad8942350360b69a1bd7bf713df27f";
+        readonly attestation: {
+            readonly format: "aws-nitro";
+            readonly reportB64: "hEShATgioFkRI79pbW9kdWxlX2lkeCdpLTA2NTAyNzM0MjNmZjY3NTY3LWVuYzAxYTAxMjJhMTNhMjliOWRmZGlnZXN0ZlNIQTM4NGl0aW1lc3RhbXAbAAABoBasgUtkcGNyc7AAWDBkg87f/tdGgP+yh1B3RKOYsojD+5Q+s/Lk/oifi2Cz1XWtiUI1A2C2mhvXv3E98n8BWDBLTVs2YbPvwSkgkAyA4Sbkzng8Ui3mwCoqW/evOiuTJ7hndvGI5L4cHEBKEp29pJMCWDAynb/jQM5eHKp3DXM2OyH3mevEVlkkmD6tdagU/IUeRoPgtSmfqkazriLTDreBBBkDWDD+UwK5y1gm9uJGWywTP7nx46KUMZGUv4pHEWPSDdx91LwKDPm88/yRbkF8pnByVT4EWDB/NnLXYAC6yWpaRfuiml8mtOMJ0c28NmxuHHZxb2qRGqxwMMGDPYSq4Peo5aubZAIFWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABrY2VydGlmaWNhdGVZAoAwggJ8MIICAaADAgECAhABoBIqE6KbnQAAAABqhK8tMAoGCCqGSM49BAMDMIGOMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEPMA0GA1UECgwGQW1hem9uMQwwCgYDVQQLDANBV1MxOTA3BgNVBAMMMGktMDY1MDI3MzQyM2ZmNjc1NjcudXMtZWFzdC0yLmF3cy5uaXRyby1lbmNsYXZlczAeFw0yNjA4MTgxOTE0NTBaFw0yNjA4MTgyMjE0NTNaMIGTMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEPMA0GA1UECgwGQW1hem9uMQwwCgYDVQQLDANBV1MxPjA8BgNVBAMMNWktMDY1MDI3MzQyM2ZmNjc1NjctZW5jMDFhMDEyMmExM2EyOWI5ZC51cy1lYXN0LTIuYXdzMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAExOq6NOiTVmOng2D3lsftqD9D8Z3BVyJKisT/kBoTg8ikZWXTK9mIliMO5mpANmZZ44ZOQdIFr8NdMO91J1XkYLT0HeXeLel1gKK/vC6p/wftvARdv/IRNuQAH6eCGZGaox0wGzAMBgNVHRMBAf8EAjAAMAsGA1UdDwQEAwIGwDAKBggqhkjOPQQDAwNpADBmAjEAvcuYYO03QWT7DFXkFCFLOf5sUFAGmzx73Xrdx4vAL+gdhHGpObgV6vpGb27VtOaRAjEA5iZjc9sFcnqNz0IJmi1+RKCpoKiG3pbRnpbmp//2wA+u6OGVy5xBCSHyoc8H9RXWaGNhYnVuZGxlhFkCFTCCAhEwggGWoAMCAQICEQD5MXVoG5Cv4R1GzLTk5/hWMAoGCCqGSM49BAMDMEkxCzAJBgNVBAYTAlVTMQ8wDQYDVQQKDAZBbWF6b24xDDAKBgNVBAsMA0FXUzEbMBkGA1UEAwwSYXdzLm5pdHJvLWVuY2xhdmVzMB4XDTE5MTAyODEzMjgwNVoXDTQ5MTAyODE0MjgwNVowSTELMAkGA1UEBhMCVVMxDzANBgNVBAoMBkFtYXpvbjEMMAoGA1UECwwDQVdTMRswGQYDVQQDDBJhd3Mubml0cm8tZW5jbGF2ZXMwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAT8AlTrpgjB82hw4prakL5GODKSc26JS//2ctmJREtQUeU0pLH22+PAvFgaMrexdgcO3hLWmj/qIRtm51LPfdHdCV9vE3D0FwhD2dwQASHkz2MBKAlmRIfJeWKEME3FP/SjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFJAltQ3ZBUfnlsOW+nKdz5mp30uWMA4GA1UdDwEB/wQEAwIBhjAKBggqhkjOPQQDAwNpADBmAjEAo38vkaHJvV7nuGJ8FpjSVQOOHwND+VtjqWKMPTmAlUWhHry/LjtV2K7ucbTD1q3zAjEAovObFgWycCil3UugabUBbmW0+96P4AYdalMZf5za9dlDvGH8K+sDy2/ujSMC89/2WQLCMIICvjCCAkWgAwIBAgIRAKtsAlC6OHV9CYvTUvENcuowCgYIKoZIzj0EAwMwSTELMAkGA1UEBhMCVVMxDzANBgNVBAoMBkFtYXpvbjEMMAoGA1UECwwDQVdTMRswGQYDVQQDDBJhd3Mubml0cm8tZW5jbGF2ZXMwHhcNMjYwODE3MDE0ODA3WhcNMjYwOTA2MDI0ODA3WjBkMQswCQYDVQQGEwJVUzEPMA0GA1UECgwGQW1hem9uMQwwCgYDVQQLDANBV1MxNjA0BgNVBAMMLTQyNTI2YTFhMTRlZWI5ZDYudXMtZWFzdC0yLmF3cy5uaXRyby1lbmNsYXZlczB2MBAGByqGSM49AgEGBSuBBAAiA2IABPbYc6802oihPW8f7SrOpe6bX/VEqImWkwKuGdiCNIJw8ODlvV/g/vnbQ6iyc2D/Qso2aFsXnD0xCZKfL4gKXBgYYaIlqyw0FMzFcObLTV02DL6qoZKsRBQy57WBckcWCKOB1TCB0jASBgNVHRMBAf8ECDAGAQH/AgECMB8GA1UdIwQYMBaAFJAltQ3ZBUfnlsOW+nKdz5mp30uWMB0GA1UdDgQWBBTcEEqnhqdhAHqna/UTkRWpDZhoGjAOBgNVHQ8BAf8EBAMCAYYwbAYDVR0fBGUwYzBhoF+gXYZbaHR0cDovL2F3cy1uaXRyby1lbmNsYXZlcy1jcmwuczMuYW1hem9uYXdzLmNvbS9jcmwvYWI0OTYwY2MtN2Q2My00MmJkLTllOWYtNTkzMzhjYjY3Zjg0LmNybDAKBggqhkjOPQQDAwNnADBkAjBkm1yPVIGwMMvdEiKszwMBbivMAY2z6CKOYZucu1XvU377ZjBIPzoJUeFUaXC3HKMCMGVHmmEb5Lp4yrdECCvcjFTTb8orl3Fq/VDpQTxONuTKhjXz/RV9eTCGNsDAKKd341kDGDCCAxQwggKaoAMCAQICEBuJDj5cT8G2aNWhsnOjdNEwCgYIKoZIzj0EAwMwZDELMAkGA1UEBhMCVVMxDzANBgNVBAoMBkFtYXpvbjEMMAoGA1UECwwDQVdTMTYwNAYDVQQDDC00MjUyNmExYTE0ZWViOWQ2LnVzLWVhc3QtMi5hd3Mubml0cm8tZW5jbGF2ZXMwHhcNMjYwODE4MTEwMjA5WhcNMjYwODI0MDUwMjA5WjCBiTE8MDoGA1UEAwwzNDk2MGY5YTZkMWYxZDQ3OS56b25hbC51cy1lYXN0LTIuYXdzLm5pdHJvLWVuY2xhdmVzMQwwCgYDVQQLDANBV1MxDzANBgNVBAoMBkFtYXpvbjELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAldBMRAwDgYDVQQHDAdTZWF0dGxlMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEp5Ii0Fy/Dj72R42Umc1v26GE4a2HVU/O60BaM8vPs/Nhub4NiKvD9BRfqxcxEI3CHvEjLvYCHWsGteFWHAj8BTgo6JaAwHrAVGFvolvlfJmcbzO++0d40g4zGWmTRytVo4HqMIHnMBIGA1UdEwEB/wQIMAYBAf8CAQEwHwYDVR0jBBgwFoAU3BBKp4anYQB6p2v1E5EVqQ2YaBowHQYDVR0OBBYEFOTavrlRQIzZ1jeuQeOiXwEne9+VMA4GA1UdDwEB/wQEAwIBhjCBgAYDVR0fBHkwdzB1oHOgcYZvaHR0cDovL2NybC11cy1lYXN0LTItYXdzLW5pdHJvLWVuY2xhdmVzLnMzLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL2NybC9iMWJmZTkxYi0xMzc2LTRhOTgtYjcwNy1iMTdmYjgwN2RmNTkuY3JsMAoGCCqGSM49BAMDA2gAMGUCMCZcHgX7NUZTU9ruzZMTpr3LTVrhrqJFGv0l49i9NKW4OR/cyb5K1ik5i0dE5xASagIxALxRwuhFvuCSd7PLcbvvT553iopsomUc49zKqKx8eU8EwaHfIHxfoZMhJ6h50eEuElkCxDCCAsAwggJFoAMCAQICFQDZZTj6v+haQMmAYEs+3bFjha7AkzAKBggqhkjOPQQDAzCBiTE8MDoGA1UEAwwzNDk2MGY5YTZkMWYxZDQ3OS56b25hbC51cy1lYXN0LTIuYXdzLm5pdHJvLWVuY2xhdmVzMQwwCgYDVQQLDANBV1MxDzANBgNVBAoMBkFtYXpvbjELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAldBMRAwDgYDVQQHDAdTZWF0dGxlMB4XDTI2MDgxODE1MDg1MloXDTI2MDgxOTE1MDg1MlowgY4xCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxlMQ8wDQYDVQQKDAZBbWF6b24xDDAKBgNVBAsMA0FXUzE5MDcGA1UEAwwwaS0wNjUwMjczNDIzZmY2NzU2Ny51cy1lYXN0LTIuYXdzLm5pdHJvLWVuY2xhdmVzMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEOGgwVRxvxs/kLVPc3+gCNbkCR1gXXibNxxAX3RINRZ4Lp3a1dGgyb1VdCEfSlbDwd/d2Xgcimi6Mo/d0c0MFxwnwHh0p99vBTKfb0JZk2DhtVcCS6LlpVrbs3f/oZLOco2YwZDASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwICBDAdBgNVHQ4EFgQUjcTPlUParxYbGA+mJ8bQtz8zTbMwHwYDVR0jBBgwFoAU5Nq+uVFAjNnWN65B46JfASd735UwCgYIKoZIzj0EAwMDaQAwZgIxALMlDm28+2LXsTI+vRIhxHnkiHS2Rwz+kcbbTq/8d/z00mDPAQWFa2or/5M90jsRhQIxAIlvUaKMy704VlQUXVH+vc/tkSXApqj8CoE2gKyRtHLi3JcidkykZ5wvFAqeGKIVgWpwdWJsaWNfa2V59ml1c2VyX2RhdGFYINhJ8ktMcdQVPTfz83OD2U38o0F/VIsxE4P/hR0WwtKuZW5vbmNl9v9YYFzC4t3/xAvXSMRAe4CgqOwHvm001y2bjOWlvXpELp1b6qQM3qLuK2EECbp82/x7z3RoJoWv8VgR9Ch+1K1lA80rgo7vdSPAuK59rfpvHAKPmWbuom8pSdgk7gXY2/wRmg==";
+        };
+    };
+    readonly slotAllocation: {
+        readonly version: "bitgraph/slot/1";
+        readonly nonceB64: "05pT2TUMA2mJ0iBsQPkOaKFIUa0i4Ta6wdNkqS3jef4=";
+        readonly counter: "12009";
+        readonly epochId: "plJ+9/nhhVEvDE4X4rCjJI+zys0fIov3XT114+mQIpk=";
+        readonly publicKeyB64: "tmp21VjPay+EhaMwmrFLfdjZo2KIjjT7VDqjmm27wHI=";
+        readonly chainId: "bitgraph:main";
+        readonly signatureB64: "LlqN1udFVXP9IFxsjwdF6//NMJZbm/IvBmlzDWJ7sfDAqCHD9fSH24w5AM4thFtf0YxMT/n5FedunYYwUQRgCA==";
+    };
+    readonly agency: {
+        readonly actor: {
+            readonly keyId: "ee0c65174625e065c18e732a226b649a138625ba49c3d7dde026957082035cde";
+            readonly publicKeyB64: "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEVXEkwZppHxU13Ew9Ap+BQnxQcNXuMvH6KPepQe3t8t1Jh2/aEguB0Ttrzxw9WGxmB8a3AdVVv+ybchgrL8XIRg==";
+            readonly algorithm: "ES256";
+            readonly provider: "passkey";
+        };
+        readonly authorization: {
+            readonly purpose: "bitgraph/commit-authorize/v1";
+            readonly format: "webauthn";
+            readonly actorKeyId: "ee0c65174625e065c18e732a226b649a138625ba49c3d7dde026957082035cde";
+            readonly artifactHash: "szEkIOHMuIaOXlqVG9uqKvaKtmnYmklfzOjEldzFP2E=";
+            readonly challenge: "WzE2FoHLFBQhiwQCpdR8xXA0g1FfOcRCcTEG+1iOJa4=";
+            readonly timestamp: 1787086799013;
+            readonly authenticatorDataB64: "Gv0914qYXymsoynDxplniUKsvF16m3HSkeyxwvtTjnsdAAAAAA==";
+            readonly clientDataJSON: "{\"type\":\"webauthn.get\",\"challenge\":\"WzE2FoHLFBQhiwQCpdR8xXA0g1FfOcRCcTEG-1iOJa4\",\"origin\":\"https://bitgraph.ing\",\"crossOrigin\":false}";
+            readonly signatureB64: "MEUCIQDBAxBn+pAZcq9YTCVnGcoV6TX+dC1sR1R/0ufz5GSf8gIgMrlaLEPP8f4uFLfTXHT0EA+m85x1LcQNDYqf3557Ktk=";
+        };
+    };
+    readonly proofHash: "gpbq9mzjkjy9xz7wZAsV+eLk1kwTeOtHogysF5rYS2w=";
+};
+//# sourceMappingURL=declared-proof-fixture.d.ts.map

package/dist/__tests__/declared-proof-fixture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"declared-proof-fixture.d.ts","sourceRoot":"","sources":["../../src/__tests__/declared-proof-fixture.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwDjB,CAAC"}

package/dist/__tests__/declared-proof-fixture.js

@@ -0,0 +1,66 @@
+/**
+ * The first declared recording ever made (ledger #12,010, 2026-08-18), kept
+ * as a fixture because its absence is what let two verifier bugs through that
+ * day (see dc26b5fd). A real WebAuthn assertion: origin https://bitgraph.ing,
+ * rpIdHash = SHA-256("bitgraph.ing"), flags UP|UV|BE|BS (a synced passkey).
+ * The artifact bytes are not here, so it is checked with verifyProofIntegrity.
+ * Same bytes as packages/player/src/__tests__/fixtures/declared-12010/proof.json.
+ */
+export const DECLARED_12010 = {
+    "version": "bitgraph/1",
+    "artifact": {
+        "hashAlg": "sha256",
+        "digestB64": "szEkIOHMuIaOXlqVG9uqKvaKtmnYmklfzOjEldzFP2E="
+    },
+    "commit": {
+        "nonceB64": "05pT2TUMA2mJ0iBsQPkOaKFIUa0i4Ta6wdNkqS3jef4=",
+        "counter": "12010",
+        "slotCounter": "12009",
+        "slotHashB64": "VbOoREc4tcmNwFFYmtfenUZ04LNkjP02wQN2okIi81Y=",
+        "epochId": "plJ+9/nhhVEvDE4X4rCjJI+zys0fIov3XT114+mQIpk=",
+        "prevB64": "3TzjHBZWqTMte6FE0BZ0SM7hrcRhFv29Sl4NMf/ZvBs=",
+        "chainId": "bitgraph:main"
+    },
+    "signer": {
+        "publicKeyB64": "tmp21VjPay+EhaMwmrFLfdjZo2KIjjT7VDqjmm27wHI=",
+        "signatureB64": "96dTfH4EYq1pRvS7zAhVZuiCLsfrlur0QkA4dfkRQZtbkQ8dgebEQn85TOdvvPtk2YYh9pP0k46HWrZuOOYlBg=="
+    },
+    "environment": {
+        "enforcement": "measured-tee",
+        "measurement": "6483cedffed74680ffb287507744a398b288c3fb943eb3f2e4fe889f8b60b3d575ad8942350360b69a1bd7bf713df27f",
+        "attestation": {
+            "format": "aws-nitro",
+            "reportB64": "hEShATgioFkRI79pbW9kdWxlX2lkeCdpLTA2NTAyNzM0MjNmZjY3NTY3LWVuYzAxYTAxMjJhMTNhMjliOWRmZGlnZXN0ZlNIQTM4NGl0aW1lc3RhbXAbAAABoBasgUtkcGNyc7AAWDBkg87f/tdGgP+yh1B3RKOYsojD+5Q+s/Lk/oifi2Cz1XWtiUI1A2C2mhvXv3E98n8BWDBLTVs2YbPvwSkgkAyA4Sbkzng8Ui3mwCoqW/evOiuTJ7hndvGI5L4cHEBKEp29pJMCWDAynb/jQM5eHKp3DXM2OyH3mevEVlkkmD6tdagU/IUeRoPgtSmfqkazriLTDreBBBkDWDD+UwK5y1gm9uJGWywTP7nx46KUMZGUv4pHEWPSDdx91LwKDPm88/yRbkF8pnByVT4EWDB/NnLXYAC6yWpaRfuiml8mtOMJ0c28NmxuHHZxb2qRGqxwMMGDPYSq4Peo5aubZAIFWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPWDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABrY2VydGlmaWNhdGVZAoAwggJ8MIICAaADAgECAhABoBIqE6KbnQAAAABqhK8tMAoGCCqGSM49BAMDMIGOMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEPMA0GA1UECgwGQW1hem9uMQwwCgYDVQQLDANBV1MxOTA3BgNVBAMMMGktMDY1MDI3MzQyM2ZmNjc1NjcudXMtZWFzdC0yLmF3cy5uaXRyby1lbmNsYXZlczAeFw0yNjA4MTgxOTE0NTBaFw0yNjA4MTgyMjE0NTNaMIGTMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEPMA0GA1UECgwGQW1hem9uMQwwCgYDVQQLDANBV1MxPjA8BgNVBAMMNWktMDY1MDI3MzQyM2ZmNjc1NjctZW5jMDFhMDEyMmExM2EyOWI5ZC51cy1lYXN0LTIuYXdzMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAExOq6NOiTVmOng2D3lsftqD9D8Z3BVyJKisT/kBoTg8ikZWXTK9mIliMO5mpANmZZ44ZOQdIFr8NdMO91J1XkYLT0HeXeLel1gKK/vC6p/wftvARdv/IRNuQAH6eCGZGaox0wGzAMBgNVHRMBAf8EAjAAMAsGA1UdDwQEAwIGwDAKBggqhkjOPQQDAwNpADBmAjEAvcuYYO03QWT7DFXkFCFLOf5sUFAGmzx73Xrdx4vAL+gdhHGpObgV6vpGb27VtOaRAjEA5iZjc9sFcnqNz0IJmi1+RKCpoKiG3pbRnpbmp//2wA+u6OGVy5xBCSHyoc8H9RXWaGNhYnVuZGxlhFkCFTCCAhEwggGWoAMCAQICEQD5MXVoG5Cv4R1GzLTk5/hWMAoGCCqGSM49BAMDMEkxCzAJBgNVBAYTAlVTMQ8wDQYDVQQKDAZBbWF6b24xDDAKBgNVBAsMA0FXUzEbMBkGA1UEAwwSYXdzLm5pdHJvLWVuY2xhdmVzMB4XDTE5MTAyODEzMjgwNVoXDTQ5MTAyODE0MjgwNVowSTELMAkGA1UEBhMCVVMxDzANBgNVBAoMBkFtYXpvbjEMMAoGA1UECwwDQVdTMRswGQYDVQQDDBJhd3Mubml0cm8tZW5jbGF2ZXMwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAT8AlTrpgjB82hw4prakL5GODKSc26JS//2ctmJREtQUeU0pLH22+PAvFgaMrexdgcO3hLWmj/qIRtm51LPfdHdCV9vE3D0FwhD2dwQASHkz2MBKAlmRIfJeWKEME3FP/SjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFJAltQ3ZBUfnlsOW+nKdz5mp30uWMA4GA1UdDwEB/wQEAwIBhjAKBggqhkjOPQQDAwNpADBmAjEAo38vkaHJvV7nuGJ8FpjSVQOOHwND+VtjqWKMPTmAlUWhHry/LjtV2K7ucbTD1q3zAjEAovObFgWycCil3UugabUBbmW0+96P4AYdalMZf5za9dlDvGH8K+sDy2/ujSMC89/2WQLCMIICvjCCAkWgAwIBAgIRAKtsAlC6OHV9CYvTUvENcuowCgYIKoZIzj0EAwMwSTELMAkGA1UEBhMCVVMxDzANBgNVBAoMBkFtYXpvbjEMMAoGA1UECwwDQVdTMRswGQYDVQQDDBJhd3Mubml0cm8tZW5jbGF2ZXMwHhcNMjYwODE3MDE0ODA3WhcNMjYwOTA2MDI0ODA3WjBkMQswCQYDVQQGEwJVUzEPMA0GA1UECgwGQW1hem9uMQwwCgYDVQQLDANBV1MxNjA0BgNVBAMMLTQyNTI2YTFhMTRlZWI5ZDYudXMtZWFzdC0yLmF3cy5uaXRyby1lbmNsYXZlczB2MBAGByqGSM49AgEGBSuBBAAiA2IABPbYc6802oihPW8f7SrOpe6bX/VEqImWkwKuGdiCNIJw8ODlvV/g/vnbQ6iyc2D/Qso2aFsXnD0xCZKfL4gKXBgYYaIlqyw0FMzFcObLTV02DL6qoZKsRBQy57WBckcWCKOB1TCB0jASBgNVHRMBAf8ECDAGAQH/AgECMB8GA1UdIwQYMBaAFJAltQ3ZBUfnlsOW+nKdz5mp30uWMB0GA1UdDgQWBBTcEEqnhqdhAHqna/UTkRWpDZhoGjAOBgNVHQ8BAf8EBAMCAYYwbAYDVR0fBGUwYzBhoF+gXYZbaHR0cDovL2F3cy1uaXRyby1lbmNsYXZlcy1jcmwuczMuYW1hem9uYXdzLmNvbS9jcmwvYWI0OTYwY2MtN2Q2My00MmJkLTllOWYtNTkzMzhjYjY3Zjg0LmNybDAKBggqhkjOPQQDAwNnADBkAjBkm1yPVIGwMMvdEiKszwMBbivMAY2z6CKOYZucu1XvU377ZjBIPzoJUeFUaXC3HKMCMGVHmmEb5Lp4yrdECCvcjFTTb8orl3Fq/VDpQTxONuTKhjXz/RV9eTCGNsDAKKd341kDGDCCAxQwggKaoAMCAQICEBuJDj5cT8G2aNWhsnOjdNEwCgYIKoZIzj0EAwMwZDELMAkGA1UEBhMCVVMxDzANBgNVBAoMBkFtYXpvbjEMMAoGA1UECwwDQVdTMTYwNAYDVQQDDC00MjUyNmExYTE0ZWViOWQ2LnVzLWVhc3QtMi5hd3Mubml0cm8tZW5jbGF2ZXMwHhcNMjYwODE4MTEwMjA5WhcNMjYwODI0MDUwMjA5WjCBiTE8MDoGA1UEAwwzNDk2MGY5YTZkMWYxZDQ3OS56b25hbC51cy1lYXN0LTIuYXdzLm5pdHJvLWVuY2xhdmVzMQwwCgYDVQQLDANBV1MxDzANBgNVBAoMBkFtYXpvbjELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAldBMRAwDgYDVQQHDAdTZWF0dGxlMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEp5Ii0Fy/Dj72R42Umc1v26GE4a2HVU/O60BaM8vPs/Nhub4NiKvD9BRfqxcxEI3CHvEjLvYCHWsGteFWHAj8BTgo6JaAwHrAVGFvolvlfJmcbzO++0d40g4zGWmTRytVo4HqMIHnMBIGA1UdEwEB/wQIMAYBAf8CAQEwHwYDVR0jBBgwFoAU3BBKp4anYQB6p2v1E5EVqQ2YaBowHQYDVR0OBBYEFOTavrlRQIzZ1jeuQeOiXwEne9+VMA4GA1UdDwEB/wQEAwIBhjCBgAYDVR0fBHkwdzB1oHOgcYZvaHR0cDovL2NybC11cy1lYXN0LTItYXdzLW5pdHJvLWVuY2xhdmVzLnMzLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL2NybC9iMWJmZTkxYi0xMzc2LTRhOTgtYjcwNy1iMTdmYjgwN2RmNTkuY3JsMAoGCCqGSM49BAMDA2gAMGUCMCZcHgX7NUZTU9ruzZMTpr3LTVrhrqJFGv0l49i9NKW4OR/cyb5K1ik5i0dE5xASagIxALxRwuhFvuCSd7PLcbvvT553iopsomUc49zKqKx8eU8EwaHfIHxfoZMhJ6h50eEuElkCxDCCAsAwggJFoAMCAQICFQDZZTj6v+haQMmAYEs+3bFjha7AkzAKBggqhkjOPQQDAzCBiTE8MDoGA1UEAwwzNDk2MGY5YTZkMWYxZDQ3OS56b25hbC51cy1lYXN0LTIuYXdzLm5pdHJvLWVuY2xhdmVzMQwwCgYDVQQLDANBV1MxDzANBgNVBAoMBkFtYXpvbjELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAldBMRAwDgYDVQQHDAdTZWF0dGxlMB4XDTI2MDgxODE1MDg1MloXDTI2MDgxOTE1MDg1MlowgY4xCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxlMQ8wDQYDVQQKDAZBbWF6b24xDDAKBgNVBAsMA0FXUzE5MDcGA1UEAwwwaS0wNjUwMjczNDIzZmY2NzU2Ny51cy1lYXN0LTIuYXdzLm5pdHJvLWVuY2xhdmVzMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEOGgwVRxvxs/kLVPc3+gCNbkCR1gXXibNxxAX3RINRZ4Lp3a1dGgyb1VdCEfSlbDwd/d2Xgcimi6Mo/d0c0MFxwnwHh0p99vBTKfb0JZk2DhtVcCS6LlpVrbs3f/oZLOco2YwZDASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwICBDAdBgNVHQ4EFgQUjcTPlUParxYbGA+mJ8bQtz8zTbMwHwYDVR0jBBgwFoAU5Nq+uVFAjNnWN65B46JfASd735UwCgYIKoZIzj0EAwMDaQAwZgIxALMlDm28+2LXsTI+vRIhxHnkiHS2Rwz+kcbbTq/8d/z00mDPAQWFa2or/5M90jsRhQIxAIlvUaKMy704VlQUXVH+vc/tkSXApqj8CoE2gKyRtHLi3JcidkykZ5wvFAqeGKIVgWpwdWJsaWNfa2V59ml1c2VyX2RhdGFYINhJ8ktMcdQVPTfz83OD2U38o0F/VIsxE4P/hR0WwtKuZW5vbmNl9v9YYFzC4t3/xAvXSMRAe4CgqOwHvm001y2bjOWlvXpELp1b6qQM3qLuK2EECbp82/x7z3RoJoWv8VgR9Ch+1K1lA80rgo7vdSPAuK59rfpvHAKPmWbuom8pSdgk7gXY2/wRmg=="
+        }
+    },
+    "slotAllocation": {
+        "version": "bitgraph/slot/1",
+        "nonceB64": "05pT2TUMA2mJ0iBsQPkOaKFIUa0i4Ta6wdNkqS3jef4=",
+        "counter": "12009",
+        "epochId": "plJ+9/nhhVEvDE4X4rCjJI+zys0fIov3XT114+mQIpk=",
+        "publicKeyB64": "tmp21VjPay+EhaMwmrFLfdjZo2KIjjT7VDqjmm27wHI=",
+        "chainId": "bitgraph:main",
+        "signatureB64": "LlqN1udFVXP9IFxsjwdF6//NMJZbm/IvBmlzDWJ7sfDAqCHD9fSH24w5AM4thFtf0YxMT/n5FedunYYwUQRgCA=="
+    },
+    "agency": {
+        "actor": {
+            "keyId": "ee0c65174625e065c18e732a226b649a138625ba49c3d7dde026957082035cde",
+            "publicKeyB64": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEVXEkwZppHxU13Ew9Ap+BQnxQcNXuMvH6KPepQe3t8t1Jh2/aEguB0Ttrzxw9WGxmB8a3AdVVv+ybchgrL8XIRg==",
+            "algorithm": "ES256",
+            "provider": "passkey"
+        },
+        "authorization": {
+            "purpose": "bitgraph/commit-authorize/v1",
+            "format": "webauthn",
+            "actorKeyId": "ee0c65174625e065c18e732a226b649a138625ba49c3d7dde026957082035cde",
+            "artifactHash": "szEkIOHMuIaOXlqVG9uqKvaKtmnYmklfzOjEldzFP2E=",
+            "challenge": "WzE2FoHLFBQhiwQCpdR8xXA0g1FfOcRCcTEG+1iOJa4=",
+            "timestamp": 1787086799013,
+            "authenticatorDataB64": "Gv0914qYXymsoynDxplniUKsvF16m3HSkeyxwvtTjnsdAAAAAA==",
+            "clientDataJSON": "{\"type\":\"webauthn.get\",\"challenge\":\"WzE2FoHLFBQhiwQCpdR8xXA0g1FfOcRCcTEG-1iOJa4\",\"origin\":\"https://bitgraph.ing\",\"crossOrigin\":false}",
+            "signatureB64": "MEUCIQDBAxBn+pAZcq9YTCVnGcoV6TX+dC1sR1R/0ufz5GSf8gIgMrlaLEPP8f4uFLfTXHT0EA+m85x1LcQNDYqf3557Ktk="
+        }
+    },
+    "proofHash": "gpbq9mzjkjy9xz7wZAsV+eLk1kwTeOtHogysF5rYS2w="
+};
+//# sourceMappingURL=declared-proof-fixture.js.map

package/dist/__tests__/declared-proof-fixture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"declared-proof-fixture.js","sourceRoot":"","sources":["../../src/__tests__/declared-proof-fixture.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,YAAY;IACvB,UAAU,EAAE;QACV,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,8CAA8C;KAC5D;IACD,QAAQ,EAAE;QACR,UAAU,EAAE,8CAA8C;QAC1D,SAAS,EAAE,OAAO;QAClB,aAAa,EAAE,OAAO;QACtB,aAAa,EAAE,8CAA8C;QAC7D,SAAS,EAAE,8CAA8C;QACzD,SAAS,EAAE,8CAA8C;QACzD,SAAS,EAAE,eAAe;KAC3B;IACD,QAAQ,EAAE;QACR,cAAc,EAAE,8CAA8C;QAC9D,cAAc,EAAE,0FAA0F;KAC3G;IACD,aAAa,EAAE;QACb,aAAa,EAAE,cAAc;QAC7B,aAAa,EAAE,kGAAkG;QACjH,aAAa,EAAE;YACb,QAAQ,EAAE,WAAW;YACrB,WAAW,EAAE,82LAA82L;SAC53L;KACF;IACD,gBAAgB,EAAE;QAChB,SAAS,EAAE,iBAAiB;QAC5B,UAAU,EAAE,8CAA8C;QAC1D,SAAS,EAAE,OAAO;QAClB,SAAS,EAAE,8CAA8C;QACzD,cAAc,EAAE,8CAA8C;QAC9D,SAAS,EAAE,eAAe;QAC1B,cAAc,EAAE,0FAA0F;KAC3G;IACD,QAAQ,EAAE;QACR,OAAO,EAAE;YACP,OAAO,EAAE,kEAAkE;YAC3E,cAAc,EAAE,8HAA8H;YAC9I,WAAW,EAAE,OAAO;YACpB,UAAU,EAAE,SAAS;SACtB;QACD,eAAe,EAAE;YACf,SAAS,EAAE,8BAA8B;YACzC,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,kEAAkE;YAChF,cAAc,EAAE,8CAA8C;YAC9D,WAAW,EAAE,8CAA8C;YAC3D,WAAW,EAAE,aAAa;YAC1B,sBAAsB,EAAE,sDAAsD;YAC9E,gBAAgB,EAAE,qJAAqJ;YACvK,cAAc,EAAE,kGAAkG;SACnH;KACF;IACD,WAAW,EAAE,8CAA8C;CACnD,CAAC"}

package/dist/__tests__/mock-proof-fixture.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Shared mock proof fixture.
+ *
+ * Extracted verbatim from proof-hash.test.ts (values unchanged, byte for
+ * byte) so other suites can import the fixture without importing a test
+ * file (which would re-register its suites under node:test).
+ *
+ * Placeholder values throughout: the digest, keys, and signatures are not
+ * real base64 crypto material. It is a canonical-hash and ingest fixture;
+ * it fails full verification by design, always for a precise non-version
+ * reason (the placeholder digest is not strict base64), never as a pass.
+ */
+import type { BitGraphProof } from "../index.js";
+export declare const MOCK_PROOF: BitGraphProof;
+//# sourceMappingURL=mock-proof-fixture.d.ts.map

package/dist/__tests__/mock-proof-fixture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-proof-fixture.d.ts","sourceRoot":"","sources":["../../src/__tests__/mock-proof-fixture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,eAAO,MAAM,UAAU,EAAE,aAoBxB,CAAC"}

package/dist/__tests__/mock-proof-fixture.js

@@ -0,0 +1,34 @@
+/**
+ * Shared mock proof fixture.
+ *
+ * Extracted verbatim from proof-hash.test.ts (values unchanged, byte for
+ * byte) so other suites can import the fixture without importing a test
+ * file (which would re-register its suites under node:test).
+ *
+ * Placeholder values throughout: the digest, keys, and signatures are not
+ * real base64 crypto material. It is a canonical-hash and ingest fixture;
+ * it fails full verification by design, always for a precise non-version
+ * reason (the placeholder digest is not strict base64), never as a pass.
+ */
+export const MOCK_PROOF = {
+    version: "bitgraph/1",
+    artifact: { hashAlg: "sha256", digestB64: "abc123==" },
+    commit: {
+        nonceB64: "nonce==",
+        counter: "42",
+        slotCounter: "41",
+        epochId: "epoch==",
+        prevB64: "prev==",
+    },
+    signer: {
+        publicKeyB64: "pubkey==",
+        signatureB64: "sig==",
+    },
+    environment: {
+        enforcement: "measured-tee",
+        measurement: "pcr0hash",
+        attestation: { format: "aws-nitro", reportB64: "report==" },
+    },
+    attribution: { name: "test", message: "hello" },
+};
+//# sourceMappingURL=mock-proof-fixture.js.map