@mikeargento/bitgraph 1.9.1 → 1.10.0

package/src/__tests__/proof-integrity.test.ts

@@ -1,576 +0,0 @@
-// Copyright (c) Argento Computing Inc. All rights reserved. See LICENSE.
-
-/**
- * Tests for verifyProofIntegrity, the bytes-free proof integrity API in
- * @mikeargento/bitgraph-verify.
- *
- * Also carries regression coverage asserting that verify() behavior is
- * unchanged by the shared-pipeline refactor: same checks, same order,
- * same failure strings.
- */
-
-import { describe, test, before, beforeEach } from "node:test";
-import * as assert from "node:assert/strict";
-import { getPublicKeyAsync, signAsync } from "@noble/ed25519";
-import { sha256 } from "@noble/hashes/sha256";
-import {
-  verify,
-  verifyProofIntegrity,
-  resetEpochLinkState,
-  createVerificationContext,
-  canonicalize,
-} from "@mikeargento/bitgraph-verify";
-import type { BitGraphProof, ProofIntegrityResult } from "@mikeargento/bitgraph-verify";
-import { Constructor } from "../constructor.js";
-import type { HostCapabilities } from "../host.js";
-
-// ---------------------------------------------------------------------------
-// Test-fixture helpers
-// ---------------------------------------------------------------------------
-
-interface Fixture {
-  proof: BitGraphProof;
-  bytes: Uint8Array;
-  publicKeyB64: string;
-  measurement: string;
-}
-
-/** Constructor-built fixture, mirroring makeFixture in verifier.test.ts. */
-async function makeFixture(opts?: {
-  epochId?: string;
-  withCounter?: boolean;
-}): Promise<Fixture> {
-  const privateKey = crypto.getRandomValues(new Uint8Array(32));
-  const publicKeyBytes = await getPublicKeyAsync(privateKey);
-  const publicKeyB64 = Buffer.from(publicKeyBytes).toString("base64");
-  const measurement = "test-measurement-integrity";
-
-  let counter = 0;
-  const host: HostCapabilities = opts?.withCounter
-    ? {
-        enforcementTier: "stub" as const,
-        getMeasurement: async () => measurement,
-        getFreshNonce: async () => crypto.getRandomValues(new Uint8Array(16)),
-        sign: async (data: Uint8Array) => signAsync(data, privateKey),
-        getPublicKey: async () => publicKeyBytes,
-        nextCounter: async () => String(++counter),
-      }
-    : {
-        enforcementTier: "stub" as const,
-        getMeasurement: async () => measurement,
-        getFreshNonce: async () => crypto.getRandomValues(new Uint8Array(16)),
-        sign: async (data: Uint8Array) => signAsync(data, privateKey),
-        getPublicKey: async () => publicKeyBytes,
-      };
-
-  const ctor = await Constructor.initialize(
-    opts?.epochId !== undefined ? { host, epochId: opts.epochId } : { host },
-  );
-
-  const bytes = new TextEncoder().encode("bitgraph-integrity-test-payload");
-  const proof = await ctor.commit({ bytes });
-
-  return { proof, bytes, publicKeyB64, measurement };
-}
-
-/** Deep-clone a proof so mutations don't affect the original. */
-function clone(proof: BitGraphProof): BitGraphProof {
-  return JSON.parse(JSON.stringify(proof)) as BitGraphProof;
-}
-
-function b64(bytes: Uint8Array): string {
-  return Buffer.from(bytes).toString("base64");
-}
-
-interface ManualKey {
-  privateKey: Uint8Array;
-  publicKeyB64: string;
-}
-
-async function makeKey(): Promise<ManualKey> {
-  const privateKey = crypto.getRandomValues(new Uint8Array(32));
-  const publicKeyB64 = b64(await getPublicKeyAsync(privateKey));
-  return { privateKey, publicKeyB64 };
-}
-
-/**
- * Manually build and sign a proof over the exact canonical SignedBody
- * layout the verifier reconstructs. Used for slot-carrying and
- * epochLink-carrying proofs, which the root Constructor does not produce.
- */
-async function signBody(
-  key: ManualKey,
-  artifact: BitGraphProof["artifact"],
-  commit: BitGraphProof["commit"],
-  measurement: string,
-): Promise<BitGraphProof> {
-  const signedBody = {
-    version: "bitgraph/1" as const,
-    artifact,
-    commit,
-    publicKeyB64: key.publicKeyB64,
-    enforcement: "stub" as const,
-    measurement,
-  };
-  const signatureB64 = b64(await signAsync(canonicalize(signedBody), key.privateKey));
-  return {
-    version: "bitgraph/1",
-    artifact,
-    commit,
-    signer: { publicKeyB64: key.publicKeyB64, signatureB64 },
-    environment: { enforcement: "stub", measurement },
-  };
-}
-
-interface SlotFixture {
-  proof: BitGraphProof;
-  bytes: Uint8Array;
-  measurement: string;
-}
-
-/**
- * Build a slot-carrying proof: slot allocated at counter 1, commit at
- * counter 2, slotHashB64 binding the signed commit to the exact slot body.
- */
-async function makeSlotFixture(opts?: { commitCounter?: string }): Promise<SlotFixture> {
-  const key = await makeKey();
-  const measurement = "test-measurement-slot";
-  const epochId = "epoch-slot-test";
-  const nonceB64 = b64(crypto.getRandomValues(new Uint8Array(16)));
-
-  const slotBody = {
-    version: "bitgraph/slot/1" as const,
-    nonceB64,
-    counter: "1",
-    time: 1_700_000_000_000,
-    epochId,
-    publicKeyB64: key.publicKeyB64,
-  };
-  const slotCanonical = canonicalize(slotBody);
-  const slotSignatureB64 = b64(await signAsync(slotCanonical, key.privateKey));
-  const slotHashB64 = b64(sha256(slotCanonical));
-
-  const bytes = new TextEncoder().encode("bitgraph-integrity-slot-payload");
-  const artifact: BitGraphProof["artifact"] = {
-    hashAlg: "sha256",
-    digestB64: b64(sha256(bytes)),
-  };
-  const commit: BitGraphProof["commit"] = {
-    nonceB64,
-    counter: opts?.commitCounter ?? "2",
-    epochId,
-    slotCounter: "1",
-    slotHashB64,
-  };
-
-  const proof = await signBody(key, artifact, commit, measurement);
-  proof.slotAllocation = { ...slotBody, signatureB64: slotSignatureB64 };
-  return { proof, bytes, measurement };
-}
-
-interface EpochLinkFixture {
-  proof: BitGraphProof;
-  bytes: Uint8Array;
-}
-
-/**
- * Build an epoch-genesis proof carrying an epochLink. The link is inside
- * the signed commit, so the Ed25519 signature covers it.
- */
-async function makeEpochLinkFixture(opts?: {
-  toEpochId?: string;
-  samePrevKey?: boolean;
-}): Promise<EpochLinkFixture> {
-  const key = await makeKey();
-  const prevKey = await makeKey();
-  const toEpochId = opts?.toEpochId ?? "epoch-successor-a";
-
-  const epochLink = {
-    prevEpochId: "epoch-predecessor-a",
-    prevPublicKeyB64: opts?.samePrevKey === true ? key.publicKeyB64 : prevKey.publicKeyB64,
-    prevCounter: "42",
-    prevProofHashB64: b64(sha256(new TextEncoder().encode("predecessor-terminal-proof"))),
-    toEpochId,
-    toPublicKeyB64: key.publicKeyB64,
-  };
-
-  const bytes = new TextEncoder().encode("bitgraph-integrity-epochlink-payload");
-  const artifact: BitGraphProof["artifact"] = {
-    hashAlg: "sha256",
-    digestB64: b64(sha256(bytes)),
-  };
-  const commit: BitGraphProof["commit"] = {
-    nonceB64: b64(crypto.getRandomValues(new Uint8Array(16))),
-    counter: "1",
-    epochId: toEpochId,
-    epochLink,
-  };
-
-  const proof = await signBody(key, artifact, commit, "test-measurement-epochlink");
-  return { proof, bytes };
-}
-
-// ---------------------------------------------------------------------------
-// Module-level fixtures
-// ---------------------------------------------------------------------------
-
-let fx!: Fixture;
-
-before(async () => {
-  fx = await makeFixture();
-});
-
-// ---------------------------------------------------------------------------
-// Happy path: integrity without bytes
-// ---------------------------------------------------------------------------
-
-describe("verifyProofIntegrity: valid proof, no bytes", () => {
-  test("passes for a freshly created proof and reports binding not checked", async () => {
-    const result = await verifyProofIntegrity({ proof: fx.proof });
-    assert.deepEqual(result, { valid: true, artifactBinding: "not-checked" });
-  });
-
-  test("passes for a proof with counter and epochId", async () => {
-    const chained = await makeFixture({ withCounter: true, epochId: "epoch-integrity-xyz" });
-    const result = await verifyProofIntegrity({ proof: chained.proof });
-    assert.deepEqual(result, { valid: true, artifactBinding: "not-checked" });
-  });
-
-  test("passes even when verify() with wrong bytes fails: binding is genuinely not checked", async () => {
-    const wrongBytes = new Uint8Array([1, 2, 3]);
-    const full = await verify({ proof: fx.proof, bytes: wrongBytes });
-    assert.equal(full.valid, false);
-    assert.match(full.reason ?? "", /digest mismatch/);
-
-    const integrity = await verifyProofIntegrity({ proof: fx.proof });
-    assert.deepEqual(integrity, { valid: true, artifactBinding: "not-checked" });
-  });
-});
-
-// ---------------------------------------------------------------------------
-// Result shape
-// ---------------------------------------------------------------------------
-
-describe("verifyProofIntegrity: result shape", () => {
-  test("failure result also carries artifactBinding 'not-checked' plus a reason", async () => {
-    const tampered = clone(fx.proof);
-    tampered.signer.signatureB64 = Buffer.alloc(64).toString("base64");
-    const result: ProofIntegrityResult = await verifyProofIntegrity({ proof: tampered });
-    assert.equal(result.valid, false);
-    assert.equal(result.artifactBinding, "not-checked");
-    assert.equal(typeof result.reason, "string");
-  });
-});
-
-// ---------------------------------------------------------------------------
-// Tampering
-// ---------------------------------------------------------------------------
-
-describe("verifyProofIntegrity: tampering", () => {
-  test("fails when signatureB64 is replaced with all-zeros", async () => {
-    const tampered = clone(fx.proof);
-    tampered.signer.signatureB64 = Buffer.alloc(64).toString("base64");
-    const result = await verifyProofIntegrity({ proof: tampered });
-    assert.equal(result.valid, false);
-    assert.match(result.reason ?? "", /signature/);
-  });
-
-  test("fails when version is tampered, with a version reason", async () => {
-    const tampered = clone(fx.proof);
-    (tampered as unknown as Record<string, unknown>)["version"] = "bitgraph/2";
-    const result = await verifyProofIntegrity({ proof: tampered });
-    assert.equal(result.valid, false);
-    assert.equal(result.reason, "unsupported proof version: bitgraph/2");
-  });
-
-  test("fails when a signed field (measurement) is tampered", async () => {
-    const tampered = clone(fx.proof);
-    tampered.environment.measurement = "evil-measurement";
-    const result = await verifyProofIntegrity({ proof: tampered });
-    assert.equal(result.valid, false);
-    assert.match(result.reason ?? "", /signature/);
-  });
-
-  test("fails when artifact.digestB64 is not valid base64 (well-formedness still checked)", async () => {
-    const tampered = clone(fx.proof);
-    tampered.artifact.digestB64 = "!!!";
-    const result = await verifyProofIntegrity({ proof: tampered });
-    assert.equal(result.valid, false);
-    assert.equal(result.reason, "artifact.digestB64 is not valid base64");
-  });
-
-  test("fails for non-object proof", async () => {
-    const result = await verifyProofIntegrity({
-      proof: "not-a-proof" as unknown as BitGraphProof,
-    });
-    assert.equal(result.valid, false);
-    assert.match(result.reason ?? "", /object/);
-  });
-});
-
-// ---------------------------------------------------------------------------
-// Slot allocation (bytes-free)
-// ---------------------------------------------------------------------------
-
-describe("verifyProofIntegrity: slot allocation", () => {
-  test("passes for a valid slot-carrying proof", async () => {
-    const slotFx = await makeSlotFixture();
-    const result = await verifyProofIntegrity({ proof: slotFx.proof });
-    assert.deepEqual(result, { valid: true, artifactBinding: "not-checked" });
-  });
-
-  test("fails when commit.slotHashB64 is tampered (signed field)", async () => {
-    const slotFx = await makeSlotFixture();
-    const tampered = clone(slotFx.proof);
-    tampered.commit.slotHashB64 = Buffer.alloc(32, 0xee).toString("base64");
-    const result = await verifyProofIntegrity({ proof: tampered });
-    assert.equal(result.valid, false);
-    assert.match(result.reason ?? "", /signature/);
-  });
-
-  test("fails with a slot binding reason when the embedded slot record is swapped", async () => {
-    const slotA = await makeSlotFixture();
-    const slotB = await makeSlotFixture();
-    const tampered = clone(slotA.proof);
-    // slotB's record is validly signed by its own key, but it is not the
-    // record that slotA's signed commit.slotHashB64 binds to.
-    tampered.slotAllocation = clone(slotB.proof).slotAllocation!;
-    const result = await verifyProofIntegrity({ proof: tampered });
-    assert.equal(result.valid, false);
-    assert.match(result.reason ?? "", /slotHashB64 does not match SHA-256 of canonical slot body/);
-  });
-
-  test("fails when slotAllocation.counter is tampered (slot signature breaks)", async () => {
-    const slotFx = await makeSlotFixture();
-    const tampered = clone(slotFx.proof);
-    tampered.slotAllocation!.counter = "999";
-    const result = await verifyProofIntegrity({ proof: tampered });
-    assert.equal(result.valid, false);
-    assert.match(result.reason ?? "", /slotAllocation signature verification failed/);
-  });
-
-  test("fails when slot counter is not less than commit counter", async () => {
-    // Slot at counter 1, commit also at counter 1: ordering violated even
-    // though every signature is genuine.
-    const slotFx = await makeSlotFixture({ commitCounter: "1" });
-    const result = await verifyProofIntegrity({ proof: slotFx.proof });
-    assert.equal(result.valid, false);
-    assert.match(result.reason ?? "", /must be less than commit\.counter/);
-  });
-});
-
-// ---------------------------------------------------------------------------
-// Epoch link (bytes-free)
-// ---------------------------------------------------------------------------
-
-describe("verifyProofIntegrity: epochLink", () => {
-  beforeEach(() => {
-    resetEpochLinkState();
-  });
-
-  test("passes for a valid epoch-genesis proof with epochLink", async () => {
-    const linkFx = await makeEpochLinkFixture();
-    const result = await verifyProofIntegrity({ proof: linkFx.proof });
-    assert.deepEqual(result, { valid: true, artifactBinding: "not-checked" });
-  });
-
-  test("is idempotent for the same successor epoch", async () => {
-    const linkFx = await makeEpochLinkFixture();
-    const first = await verifyProofIntegrity({ proof: linkFx.proof });
-    const second = await verifyProofIntegrity({ proof: linkFx.proof });
-    assert.equal(first.valid, true);
-    assert.equal(second.valid, true);
-  });
-
-  test("fails when predecessor and successor keys are identical", async () => {
-    const linkFx = await makeEpochLinkFixture({ samePrevKey: true });
-    const result = await verifyProofIntegrity({ proof: linkFx.proof });
-    assert.equal(result.valid, false);
-    assert.match(result.reason ?? "", /different keys/);
-  });
-
-  /* A rejected proof must not change what the verifier accepts afterwards.
-     Before 2026-09-20 the single-successor map was written during the epoch
-     link check, which runs BEFORE the policy check, so a proof refused for an
-     untrusted measurement still claimed its predecessor and the next honest
-     proof was reported as a fork. Verification is a function of its inputs. */
-  test("a proof rejected by policy does not consume its predecessor", async () => {
-    const rejected = await makeEpochLinkFixture({ toEpochId: "epoch-successor-a" });
-    const honest = await makeEpochLinkFixture({ toEpochId: "epoch-successor-b" });
-
-    const r1 = await verifyProofIntegrity({
-      proof: rejected.proof,
-      trustAnchors: { allowedMeasurements: ["some-other-measurement"] },
-    });
-    assert.equal(r1.valid, false);
-
-    const r2 = await verifyProofIntegrity({ proof: honest.proof });
-    assert.equal(r2.valid, true, r2.valid ? "" : r2.reason);
-  });
-
-  test("an explicit context keeps one verification's history out of another's", async () => {
-    const a = await makeEpochLinkFixture({ toEpochId: "epoch-successor-a" });
-    const b = await makeEpochLinkFixture({ toEpochId: "epoch-successor-b" });
-    const one = createVerificationContext();
-    const two = createVerificationContext();
-
-    assert.equal((await verifyProofIntegrity({ proof: a.proof, context: one })).valid, true);
-    assert.equal((await verifyProofIntegrity({ proof: b.proof, context: two })).valid, true);
-
-    // The same context still catches the fork.
-    const forked = await verifyProofIntegrity({ proof: b.proof, context: one });
-    assert.equal(forked.valid, false);
-    assert.match(forked.reason ?? "", /FORK DETECTED/);
-  });
-
-  test("detects a fork: same predecessor consumed by two successor epochs", async () => {
-    const first = await makeEpochLinkFixture({ toEpochId: "epoch-successor-a" });
-    const second = await makeEpochLinkFixture({ toEpochId: "epoch-successor-b" });
-
-    const r1 = await verifyProofIntegrity({ proof: first.proof });
-    assert.equal(r1.valid, true);
-
-    const r2 = await verifyProofIntegrity({ proof: second.proof });
-    assert.equal(r2.valid, false);
-    assert.match(r2.reason ?? "", /FORK DETECTED/);
-  });
-});
-
-// ---------------------------------------------------------------------------
-// Policy checks (trustAnchors)
-// ---------------------------------------------------------------------------
-
-describe("verifyProofIntegrity: policy (trustAnchors)", () => {
-  test("passes when measurement is in the allowlist", async () => {
-    const result = await verifyProofIntegrity({
-      proof: fx.proof,
-      trustAnchors: { allowedMeasurements: [fx.measurement] },
-    });
-    assert.deepEqual(result, { valid: true, artifactBinding: "not-checked" });
-  });
-
-  test("fails when measurement is not in the allowlist", async () => {
-    const result = await verifyProofIntegrity({
-      proof: fx.proof,
-      trustAnchors: { allowedMeasurements: ["expected-meas"] },
-    });
-    assert.equal(result.valid, false);
-    assert.match(result.reason ?? "", /measurement/);
-  });
-
-  test("fails when requireEnforcement does not match", async () => {
-    const result = await verifyProofIntegrity({
-      proof: fx.proof,
-      trustAnchors: { requireEnforcement: "measured-tee" },
-    });
-    assert.equal(result.valid, false);
-    assert.match(result.reason ?? "", /enforcement/);
-  });
-
-  test("requireSlot fails for a slotless proof and passes for a slot-carrying proof", async () => {
-    const slotless = await verifyProofIntegrity({
-      proof: fx.proof,
-      trustAnchors: { requireSlot: true },
-    });
-    assert.equal(slotless.valid, false);
-    assert.match(slotless.reason ?? "", /slotAllocation/);
-
-    const slotFx = await makeSlotFixture();
-    const slotted = await verifyProofIntegrity({
-      proof: slotFx.proof,
-      trustAnchors: { requireSlot: true },
-    });
-    assert.deepEqual(slotted, { valid: true, artifactBinding: "not-checked" });
-  });
-
-  test("counter policy applies without bytes", async () => {
-    const slotFx = await makeSlotFixture();
-    const pass = await verifyProofIntegrity({
-      proof: slotFx.proof,
-      trustAnchors: { minCounter: "1" },
-    });
-    assert.equal(pass.valid, true);
-
-    const failResult = await verifyProofIntegrity({
-      proof: slotFx.proof,
-      trustAnchors: { minCounter: "999" },
-    });
-    assert.equal(failResult.valid, false);
-    assert.match(failResult.reason ?? "", /counter/);
-  });
-});
-
-// ---------------------------------------------------------------------------
-// Regression: verify() behavior unchanged by the shared-pipeline refactor
-// ---------------------------------------------------------------------------
-
-describe("regression: verify() unchanged", () => {
-  test("valid proof with bytes returns exactly { valid: true }", async () => {
-    const result = await verify({ proof: fx.proof, bytes: fx.bytes });
-    assert.deepEqual(result, { valid: true });
-  });
-
-  test("wrong bytes fail with the exact digest mismatch reason", async () => {
-    const result = await verify({ proof: fx.proof, bytes: new Uint8Array([9, 9, 9]) });
-    assert.equal(result.valid, false);
-    assert.equal(
-      result.reason,
-      "artifact digest mismatch: the provided bytes do not match the committed digest",
-    );
-  });
-
-  test("tampered signature fails with the exact signature reason", async () => {
-    const tampered = clone(fx.proof);
-    tampered.signer.signatureB64 = Buffer.alloc(64).toString("base64");
-    const result = await verify({ proof: tampered, bytes: fx.bytes });
-    assert.equal(result.valid, false);
-    assert.equal(result.reason, "signature verification failed: signature does not match");
-  });
-
-  test("tampered version fails with the exact version reason", async () => {
-    const tampered = clone(fx.proof);
-    (tampered as unknown as Record<string, unknown>)["version"] = "bitgraph/2";
-    const result = await verify({ proof: tampered, bytes: fx.bytes });
-    assert.equal(result.valid, false);
-    assert.equal(result.reason, "unsupported proof version: bitgraph/2");
-  });
-
-  test("verify() and verifyProofIntegrity() agree on every non-artifact failure", async () => {
-    const variants: Array<(p: BitGraphProof) => void> = [
-      (p) => {
-        (p as unknown as Record<string, unknown>)["version"] = "occ/1";
-      },
-      (p) => {
-        p.signer.signatureB64 = Buffer.alloc(64).toString("base64");
-      },
-      (p) => {
-        p.environment.measurement = "evil-measurement";
-      },
-      (p) => {
-        delete (p as unknown as Record<string, unknown>)["signer"];
-      },
-    ];
-
-    for (const mutate of variants) {
-      const tampered = clone(fx.proof);
-      mutate(tampered);
-      const full = await verify({ proof: tampered, bytes: fx.bytes });
-      const integrity = await verifyProofIntegrity({ proof: tampered });
-      assert.equal(full.valid, integrity.valid);
-      assert.equal(full.reason, integrity.reason);
-    }
-  });
-
-  test("verify() accepts the slot-carrying fixture with its bytes", async () => {
-    const slotFx = await makeSlotFixture();
-    const result = await verify({ proof: slotFx.proof, bytes: slotFx.bytes });
-    assert.deepEqual(result, { valid: true });
-  });
-
-  test("verify() accepts the epochLink fixture with its bytes", async () => {
-    resetEpochLinkState();
-    const linkFx = await makeEpochLinkFixture();
-    const result = await verify({ proof: linkFx.proof, bytes: linkFx.bytes });
-    assert.deepEqual(result, { valid: true });
-  });
-});

package/src/__tests__/real-fixtures/anchor-after-112762.json

@@ -1,47 +0,0 @@
-{
-  "version": "bitgraph/1",
-  "artifact": {
-    "hashAlg": "sha256",
-    "digestB64": "s0SCQLL8QR9pf1U/ep6prd3gF1qXAW6bZVf1S15KbfI="
-  },
-  "commit": {
-    "nonceB64": "/fDc/tHc5VXw1lN6TbdloXwJ9kViJ2Xm6DPqAV4J/m8=",
-    "counter": "112762",
-    "slotCounter": "112761",
-    "slotHashB64": "r2DHz1TJRWnW74PeyxhBKBAFc2yIJBE5AEeQIpEU1vs=",
-    "epochId": "PlvP2VDcMH9RiBA3shEOrd8xEhHuJj6Gshym/V/qKNg=",
-    "prevB64": "ZJs0jf97XakAdw1e7fiK3yMKpliUplgw6HgTw50n+bw=",
-    "chainId": "bitgraph:main"
-  },
-  "signer": {
-    "publicKeyB64": "yiKzaYXZyI+tHiSb7K/+OQv8XwErhez2TTk1efl6XAA=",
-    "signatureB64": "PhE6MG8SyxFMJIGBSkWPftfs/qZ68liHoJ30i0gv0vHRm86sSrmGyEpxYYcY2gfmYRK+p5BLyOoCXc6bhoXCCA=="
-  },
-  "environment": {
-    "enforcement": "measured-tee",
-    "measurement": "e2fccbae77ee40aac4830e84f195e05d69eb4547bbd961f4d3459feba10807140424aca42ad03810354982598c86b9cb",
-    "attestation": {
-      "format": "aws-nitro",
-      "reportB64": "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"
-    }
-  },
-  "slotAllocation": {
-    "version": "bitgraph/slot/1",
-    "nonceB64": "/fDc/tHc5VXw1lN6TbdloXwJ9kViJ2Xm6DPqAV4J/m8=",
-    "counter": "112761",
-    "epochId": "PlvP2VDcMH9RiBA3shEOrd8xEhHuJj6Gshym/V/qKNg=",
-    "publicKeyB64": "yiKzaYXZyI+tHiSb7K/+OQv8XwErhez2TTk1efl6XAA=",
-    "chainId": "bitgraph:main",
-    "signatureB64": "ywygI3mZcy7FR4JhTk7Sdk3MYrLdhXB3dUpv+VoTmpwdgQCBKXnTlzXCjsEv3/RXNmh0gzwnHgUAXrqF+lofDQ=="
-  },
-  "attribution": {
-    "name": "Ethereum Anchor",
-    "title": "https://etherscan.io/block/25525147",
-    "message": "0x04f48a70f24f21daae546d1ae49132df9e767ba4238b92ae39f0c153eb1436dc"
-  },
-  "proofHash": "H7OZf8C1Ry7cbiFMg6wxfbiqBgWNYpzJDhMePmkmda4=",
-  "ethereum": {
-    "blockNumber": 25525147,
-    "blockHash": "0x04f48a70f24f21daae546d1ae49132df9e767ba4238b92ae39f0c153eb1436dc"
-  }
-}