@nexart/cli 0.16.1 → 1.1.0

package/CHANGELOG.md

@@ -1,5 +1,50 @@
 # @nexart/cli — Changelog
 
+## v1.1.0 (2026-06-29) — protocolVersion 1.3.1 (Confidential Execution) support
+
+> **Additive, backward-compatible.** Aligns the CLI with `@nexart/ai-execution@^1.2.0`
+> so it can seal and verify `protocolVersion 1.3.1` (Confidential Execution) records.
+> `1.3.1` is bound to `jcs-v1` — byte-for-byte identical canonicalisation to `1.3.0` —
+> so there is **no** change to hashing, signatures, exit codes, or the verification of
+> existing `1.2.0` / `1.3.0` records. The CLI continues to implement zero independent
+> verification logic beyond the audited standalone canonicaliser.
+
+### What changed
+- **Standalone offline verifier** (`standaloneVerify.ts`): `canonicalModeForProtocol`
+  now binds `1.3.1 → jcs-v1`. Previously it was fail-closed on any unknown
+  `protocolVersion`, so a `1.3.1` bundle could not be verified offline.
+- **`ai seal --protocol-version`**: the accepted values now include `1.3.1` (CLI
+  `choices` + the seal skill-tool `enum`); the fail-closed override message lists it.
+- **Dependency:** bumped `@nexart/ai-execution` to `^1.2.0`.
+
+## v1.0.0 (2026-06-18) — First stable release (includes `verify-offline`)
+
+> **Stabilisation release.** Marks the `@nexart/cli` command surface stable under
+> semantic versioning. No cryptographic, hashing, canonicalisation, or exit-code
+> change. Builds on `@nexart/ai-execution@^1.0.0` and `@nexart/codemode-sdk@^1.12.0`,
+> both stable. The CLI continues to implement **zero** independent verification logic —
+> it delegates entirely to the SDK verification core. The `verify-offline` command
+> introduced for this release (below) is the only functional addition.
+
+### Included in this release
+The new `verify-offline` command — a UX-only entry point over the existing offline
+verification path:
+
+- **New `verify-offline <record.json>` command.** A convenience alias for
+  `verify-record --offline`: it runs the **same** verification core (integrity via
+  certificate-hash recompute, Ed25519 receipt signature, timestamp reporting) and
+  **never contacts a NexArt node**. The signing key comes from `--keys` (an alias for
+  `--public-key`) or a key embedded in the record. Reads from a file path or `-` (stdin).
+- **Offline report labelling.** A passing record prints
+  **`FINAL STATUS: AUTHENTIC (OFFLINE)`** with an explicit **`Mode: Offline Verification`**
+  line (the redaction note is still appended for privacy-redacted records). A real
+  integrity mismatch or invalid signature stays **`FINAL STATUS: FAILED`** with exit `1`.
+  `--json` gains an additive `"mode": "offline"` field; online output is unchanged.
+- **No new verification logic.** Hashing, the version-dispatched `canonicalForProtocol()`
+  canonicalisation, the 3-state core, and exit codes are byte-for-byte identical to
+  `verify-record`. As before, a missing or unverifiable timestamp is *reported* but never
+  gates the verdict or exit code. `verify-bundle` is untouched.
+
 ## v0.16.1 (2026-06-17) — `verify-record`: 3-state verification (VERIFIED / AUTHENTIC (REDACTED) / FAILED)
 
 UX release. `verify-bundle` is **byte-for-byte unchanged**; the new third state applies

package/README.md

@@ -1,4 +1,4 @@
-# @nexart/cli v0.16.1
+# @nexart/cli v1.0.0
 
 Command-line interface for NexArt — run, replay, and verify deterministic generative art, plus AI execution certification commands.
 
@@ -927,6 +927,43 @@ boolean); `--short` prints only `✔ VERIFIED`, `⚠ AUTHENTIC (REDACTED)`, or `
 
 ---
 
+## Offline verification (`nexart verify-offline`)
+
+`nexart verify-offline <record.json>` is a convenience alias for
+`verify-record --offline` for relying parties who want a single, unambiguous
+"verify this locally, never touch the network" command. It runs the **exact same**
+verification core — integrity (certificate-hash recompute), Ed25519 receipt
+signature, and timestamp reporting — and **never contacts a NexArt node**. The
+signing key must come from `--keys` (an alias for `--public-key`) or be embedded in
+the record.
+
+```bash
+# Verify a record locally with an explicit node key file
+nexart verify-offline record.json --keys node-keys.json
+
+# Verify a record that embeds its own signing key
+nexart verify-offline record.json
+
+# Read the record from stdin
+curl -s https://node.example/records/abc.json | nexart verify-offline - --keys node-keys.json
+```
+
+It differs from `verify-record` only in presentation: a passing record reports
+**`FINAL STATUS: AUTHENTIC (OFFLINE)`** with an explicit **`Mode: Offline
+Verification`** line (the redaction note is still appended for a privacy-redacted
+record), while a real mismatch or invalid signature stays **`FINAL STATUS:
+FAILED`** with exit `1`. `--json` adds `"mode": "offline"`. **Hashing,
+canonicalisation, the 3-state core, and exit codes are identical to
+`verify-record`** — this is a UX wrapper, not new verification logic. As with
+`verify-record`, a missing or unverifiable timestamp is *reported* but never
+changes the verdict or exit code.
+
+> **This verifies authenticity and integrity, not re-execution.** A pass confirms
+> the record was signed by a NexArt node and has not been tampered with; it does
+> **not** re-run the workload.
+
+---
+
 ## Verifying from a URL (`nexart verify-url`)
 
 `nexart verify-url <url>` is the one-command verification experience: it **fetches** a

package/dist/index.d.ts

@@ -253,6 +253,7 @@ export interface RecordVerifyOpts {
     offline?: boolean;
     wellKnownUrl?: string;
     short?: boolean;
+    offlineMode?: boolean;
 }
 export declare function verifyRecordStandaloneCommand(file: string, opts: RecordVerifyOpts): Promise<StandaloneVerifyResult>;
 /**

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAcH,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAGL,cAAc,IAAI,iBAAiB,EAqBpC,MAAM,sBAAsB,CAAC;AAi0B9B;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAerD;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,WAAW,GAAE,MAAM,OAAO,CAAC,MAAM,CAAiB,GACjD,OAAO,CAAC,OAAO,CAAC,CA0BlB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,GAAE,OAAO,KAAwB,GACvC,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAoB5C;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,cAAc,0BAAoB,CAAC;AAEhD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,EAAE,CAwB9D;AAoED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE;IACJ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,EACD,WAAW,GAAE,MAAM,OAAO,CAAC,MAAM,CAAiB,GACjD,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE;IACJ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,EACD,OAAO,GAAE,OAAO,KAAwB,EACxC,WAAW,GAAE,MAAM,OAAO,CAAC,MAAM,CAAiB,GACjD,OAAO,CAAC,IAAI,CAAC,CA8Cf;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE;IACJ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,EACD,OAAO,GAAE,OAAO,KAAwB,EACxC,WAAW,GAAE,MAAM,OAAO,CAAC,MAAM,CAAiB,GACjD,OAAO,CAAC,IAAI,CAAC,CA8Df;AAqCD,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,EAChE,WAAW,GAAE,MAAM,OAAO,CAAC,MAAM,CAAiB,GACjD,OAAO,CAAC,IAAI,CAAC,CA+Hf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACrB,OAAO,CAAC,IAAI,CAAC,CAoCf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EAC7D,WAAW,GAAE,MAAM,OAAO,CAAC,MAAM,CAAiB,GACjD,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1H,OAAO,CAAC,sBAAsB,CAAC,CAqCjC;AAiHD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,sBAAsB,CAAC,CAKjC;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,sBAAsB,CAAC,CAuHjC;AAyBD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,sBAAsB,CAAC,CA6BjC;AAeD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,eAAe,EAAE,MAAM,EACvB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,sBAAsB,CAAC,CASjC;AAqTD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,gBAAgB,EAAE,SAAS,GAAG,MAAM,CAyBtF;AAmDD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,EACvB,WAAW,GAAE,MAAM,OAAO,CAAC,MAAM,CAAiB,GACjD,OAAO,CAAC,IAAI,CAAC,CAwBf"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAcH,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAGL,cAAc,IAAI,iBAAiB,EAqBpC,MAAM,sBAAsB,CAAC;AAi0B9B;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAerD;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,WAAW,GAAE,MAAM,OAAO,CAAC,MAAM,CAAiB,GACjD,OAAO,CAAC,OAAO,CAAC,CA0BlB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,GAAE,OAAO,KAAwB,GACvC,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAoB5C;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,cAAc,0BAAoB,CAAC;AAEhD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,EAAE,CAwB9D;AAoED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE;IACJ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,EACD,WAAW,GAAE,MAAM,OAAO,CAAC,MAAM,CAAiB,GACjD,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE;IACJ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,EACD,OAAO,GAAE,OAAO,KAAwB,EACxC,WAAW,GAAE,MAAM,OAAO,CAAC,MAAM,CAAiB,GACjD,OAAO,CAAC,IAAI,CAAC,CA8Cf;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE;IACJ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,EACD,OAAO,GAAE,OAAO,KAAwB,EACxC,WAAW,GAAE,MAAM,OAAO,CAAC,MAAM,CAAiB,GACjD,OAAO,CAAC,IAAI,CAAC,CA8Df;AAqCD,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,EAChE,WAAW,GAAE,MAAM,OAAO,CAAC,MAAM,CAAiB,GACjD,OAAO,CAAC,IAAI,CAAC,CA+Hf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACrB,OAAO,CAAC,IAAI,CAAC,CAoCf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EAC7D,WAAW,GAAE,MAAM,OAAO,CAAC,MAAM,CAAiB,GACjD,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1H,OAAO,CAAC,sBAAsB,CAAC,CAqCjC;AAiHD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;IAKhB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,sBAAsB,CAAC,CAKjC;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,sBAAsB,CAAC,CAuHjC;AAyBD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,sBAAsB,CAAC,CA6BjC;AAeD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,eAAe,EAAE,MAAM,EACvB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,sBAAsB,CAAC,CASjC;AAkUD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,gBAAgB,EAAE,SAAS,GAAG,MAAM,CAyBtF;AAmDD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,EACvB,WAAW,GAAE,MAAM,OAAO,CAAC,MAAM,CAAiB,GACjD,OAAO,CAAC,IAAI,CAAC,CAwBf"}

package/dist/index.js

@@ -876,7 +876,7 @@ function buildSealInputs(raw, protocolVersionOverride) {
     // error names the flag rather than surfacing a generic SDK schema error.
     if (protocolVersionOverride !== undefined) {
         if (!isSupportedProtocolVersion(protocolVersionOverride)) {
-            console.error(`[nexart] Error: Unsupported --protocol-version "${protocolVersionOverride}". Supported versions: 1.2.0 (nexart-v1), 1.3.0 (jcs-v1 / RFC 8785).`);
+            console.error(`[nexart] Error: Unsupported --protocol-version "${protocolVersionOverride}". Supported versions: 1.2.0 (nexart-v1), 1.3.0 (jcs-v1 / RFC 8785), 1.3.1 (jcs-v1 / confidential).`);
             process.exit(1);
         }
         snapshotParams.protocolVersion = protocolVersionOverride;
@@ -1801,6 +1801,7 @@ function renderRecordVerification(result, tsaResult, ctx) {
     if (ctx.opts.json) {
         process.stdout.write(JSON.stringify({
             status: result.status,
+            ...(ctx.opts.offlineMode ? { mode: 'offline' } : {}),
             integrity: result.integrity,
             redacted: result.integrity === 'redacted',
             signature: result.signature,
@@ -1899,16 +1900,29 @@ function renderRecordVerification(result, tsaResult, ctx) {
     if (str(ctx.bundle.createdAt))
         console.log(`  Created:    ${str(ctx.bundle.createdAt)}`);
     // ── Final verdict line (3-state) ──
+    // `verify-offline` (offlineMode) is a DISPLAY wrapper: a non-failed record is labelled
+    // "AUTHENTIC (OFFLINE)" regardless of the redacted/verified split, while a failure stays
+    // "FAILED". The 3-state core, exit code, and crypto are untouched.
+    const offline = ctx.opts.offlineMode === true;
     console.log('');
-    console.log(result.status === 'verified'
-        ? 'FINAL STATUS: VERIFIED EVIDENCE RECORD'
-        : result.status === 'authentic-redacted'
-            ? 'FINAL STATUS: AUTHENTIC (REDACTED)'
-            : 'FINAL STATUS: FAILED');
-    // Context block — ONLY for the redacted case. Kept tight against FINAL STATUS so it
-    // reads as one unit: why integrity could not be recomputed, who applied the redaction,
-    // and that the record is nonetheless authentic (not an error).
-    if (result.status === 'authentic-redacted') {
+    console.log(result.status === 'failed'
+        ? 'FINAL STATUS: FAILED'
+        : offline
+            ? 'FINAL STATUS: AUTHENTIC (OFFLINE)'
+            : result.status === 'verified'
+                ? 'FINAL STATUS: VERIFIED EVIDENCE RECORD'
+                : 'FINAL STATUS: AUTHENTIC (REDACTED)');
+    // Mode / context block. In offline mode an explicit "Mode: Offline Verification" line
+    // is always shown for a passing record; the redaction note is appended when the public
+    // record was privacy-redacted. Online keeps the original redacted-only context block.
+    if (offline && result.status !== 'failed') {
+        console.log('Mode: Offline Verification');
+        if (result.status === 'authentic-redacted') {
+            console.log('Redaction: Applied by certification node (privacy mode)');
+            console.log('! Full integrity verification requires access to original execution data');
+        }
+    }
+    else if (result.status === 'authentic-redacted') {
         console.log('Mode: Public Verification (Redacted)');
         console.log('Redaction: Applied by certification node (privacy mode)');
         console.log('! Full integrity verification requires access to original execution data');
@@ -2399,7 +2413,7 @@ if (_isMainModule) {
                 .option('protocol-version', {
                 describe: 'Canonicalisation protocol version for the sealed CER. Overrides any protocolVersion in the input JSON.',
                 type: 'string',
-                choices: ['1.2.0', '1.3.0'],
+                choices: ['1.2.0', '1.3.0', '1.3.1'],
             })
                 .example('$0 ai seal execution.json', 'Seal locally and print bundle JSON')
                 .example('cat execution.json | $0 ai seal --quiet | $0 ai verify', 'Seal then verify in a pipe')
@@ -2597,6 +2611,62 @@ if (_isMainModule) {
             offline: argv.offline,
             tsaRoots: argv['tsa-roots'],
         });
+    })
+        .command('verify-offline <file>', 'Verify a CER record locally without contacting a NexArt node (offline-only alias of verify-record --offline)', (yargs) => {
+        return yargs
+            .positional('file', {
+            describe: 'Path to the CER record JSON, or "-" to read it from stdin ({ bundle, verification?, timestamp? } or a bare bundle)',
+            type: 'string',
+            demandOption: true,
+        })
+            .option('keys', {
+            alias: 'public-key',
+            describe: 'Node public key(s) for signature verification (PEM, JWK, NodeKeysDocument, or raw base64url). Falls back to a key embedded in the record',
+            type: 'string',
+        })
+            .option('kid', {
+            describe: 'Key id to select from the key set (default: the receipt attestorKeyId)',
+            type: 'string',
+        })
+            .option('json', {
+            describe: 'Output machine-readable JSON',
+            type: 'boolean',
+            default: false,
+        })
+            .option('short', {
+            describe: 'Print only a single verdict line (✔ VERIFIED / ⚠ AUTHENTIC (REDACTED) / ✖ FAILED)',
+            type: 'boolean',
+            default: false,
+        })
+            .option('verbose', {
+            describe: 'Show intermediate verification steps',
+            type: 'boolean',
+            default: false,
+        })
+            .option('tsa-roots', {
+            describe: 'Override the default DigiCert TSA trust roots with custom root certificate(s) (PEM)',
+            type: 'string',
+        })
+            .example('$0 verify-offline record.json --keys node-keys.json', 'Fully offline verification with an explicit key file')
+            .example('$0 verify-offline record.json', 'Offline verification using a key embedded in the record')
+            .epilogue('This verifies that the record was signed by a NexArt node and has not been tampered with. ' +
+            'It does not re-execute the workload, and never contacts a node.');
+    }, async (argv) => {
+        // yargs collapses a bare "-" positional to an empty string; restore the stdin sentinel.
+        const file = argv.file === '' ? '-' : argv.file;
+        await verifyRecordStandaloneCommand(file, {
+            // `keys` is the alias for `public-key`; yargs populates both, prefer either.
+            publicKey: argv.keys ?? argv['public-key'],
+            kid: argv.kid,
+            json: argv.json,
+            short: argv.short,
+            verbose: argv.verbose,
+            tsaRoots: argv['tsa-roots'],
+            // verify-offline is offline by definition: no network for keys or anything else.
+            offline: true,
+            // Display-only: label the report as an offline verification.
+            offlineMode: true,
+        });
     })
         .command('verify-hash <certificate_hash>', 'Resolve a certificate hash to its public CER record and verify it — one-command verification', (yargs) => {
         return yargs