@smartledger/bsv 5.5.2 → 6.0.0

package/CHANGELOG.md

@@ -5,10 +5,126 @@ All notable changes to SmartLedger-BSV will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+## [6.0.0] - 2026-07-12
+
+Major release. Combines a security-hardening pass (four CRITICAL forgery-enabling
+verification bugs, a revocation bypass, and several covenant defects — all fixed) with
+two large new capabilities: a complete **1Sat Ordinals** stack (inscriptions, the
+OrdLock marketplace, and BSV-20 / BSV-21 fungible tokens) and **trustless SPV**
+(Merkle-inclusion + header-chain confirmations). **Contains breaking changes** (see
+below). The suite grew to 4365 tests; each security fix ships an adversarial regression
+that asserts the *bad* input is rejected, and every emitted covenant/inscription script
+is interpreter-verified. A CI gate enforces that shipped bundles are a reproducible
+build of `lib/`.
+
+### Security — Fixed
+
+- **CRITICAL: forgeable signatures via the `ECDSA.verify()` trap.** `ECDSA.prototype.verify()`
+  returns the ECDSA *instance* (always truthy) with the real result on `.verified`.
+  Three call sites treated the truthy return as a boolean and one skipped the check
+  entirely, so a forged signature verified as valid:
+  - `lib/ltp/proof.js` and `lib/gdaf/did-resolver.js` (`verifyOwnership`) now read `.verified`.
+  - `lib/ltp/right.js` / `lib/ltp/obligation.js` `_verifyTokenSignature` (was a `// TODO`)
+    now verifies the JWS, **bound to the issuer DID's key** (not the attacker-controlled
+    `proof.verificationMethod`), and fails closed.
+  - Added `ECDSA.prototype.verifyBool()` and a warning on `verify()`.
+- **CRITICAL: `SmartLedgerAnchor.verifyAnchor` was a stub** returning `{verified:true}`
+  for any txid. Now fails closed (throws) unless an injected `chainProvider` performs a
+  real inclusion + OP_RETURN-commitment check.
+- **HIGH: StatusList2021 revocation bypass.** `getCredentialStatusEntry` / `updateStatusList`
+  read the revocation bitstring from an **unverified** JWT — a substituted/forged list could
+  un-revoke a credential. They now verify the list-JWT signature against a **pinned issuer**
+  before reading any bit, and cap gzip inflation (gzip-bomb DoS).
+- **HIGH: `prepareRightTokenTransfer` did not bind the signer to the current owner** — anyone
+  could mint a "valid" transfer of a token they don't own. Now bound to `credentialSubject.id`.
+- **MEDIUM: Shamir checksum leaked a hash of the secret** in every share (offline brute-force of
+  low-entropy secrets by a single, sub-threshold holder). The per-share checksum is now **off by
+  default** (opt-in via `{checksum:true}`).
+- **MEDIUM: `vcjwt.verifyVcJwt`** — tokens without an `exp` never expired; added opt-in
+  `requireExpiration`.
+- **MEDIUM: `LTP.Anchor.verifyTokenAnchor`** trusted caller-supplied `txData` with no chain
+  proof; result now carries `chainVerified:false` and the doc states it is commitment-match only.
+
+### Fixed — Covenants (consensus-relevant)
+
+- **Inverted `OP_SPLIT`/`OP_DROP` field extraction** in `covenant_builder.js` and the
+  reference ASM in `preimage.js`. After `OP_SPLIT` the right part is on top, so keeping it
+  needs `OP_NIP`; the code used `OP_DROP`, extracting the wrong bytes for RIGHT-strategy fields
+  (`value`, `nSequence`, `hashOutputs`, `nLocktime`, `sighashType`). Proven at the interpreter
+  level and fixed; added `nip()`.
+- **`SmartContract.Covenant` built a non-enforcing "covenant"** (reduces to P2PK; bound nothing
+  about the spend) while claiming "production-ready … BIP-143 validation." `createFromP2PKH`
+  now throws unless constructed with `{allowNonEnforcing:true}`, and the docs redirect to the
+  real OP_PUSH_TX primitives.
+- **Shamir RNG could hang forever** on a degenerate/stubbed CSPRNG (all-zero draws); the re-draw
+  loop is now bounded and throws instead.
+
+### Added
+
+- **Ordinal-safe transfers.** `SmartContract.Token.transferOrdinal` / `SmartContract.ordinalLock`
+  recreate a 1-sat ordinal among funding outputs (fee paid from funding, satoshi preserved), with
+  an anti-burn guard; the single-output `unlockTransfer` now refuses a 1-sat UTXO.
+- **Configurable SIGHASH covenant core.** `PushTx.pushTxCore(script, {sighashType})`,
+  `assertSighashType`, and `grind({sighashType})` enable `SIGHASH_SINGLE|ANYONECANPAY` marketplace
+  covenants (seller signs its own input+output; buyer adds funding). Default remains SIGHASH_ALL.
+- **CI bundle-parity gate** (`.github/workflows/ci.yml`): fails if the shipped `*.min.js`/
+  `*.bundle.js` are not a reproducible build of `lib/`. Added `.nvmrc` (Node 18) for reproducibility.
+- **1Sat Ordinals module** (`bsv.Ordinals`). `buildInscription`/`parseInscription`/`isInscription`
+  build and round-trip the `OP_FALSE OP_IF "ord" … OP_ENDIF` inscription envelope on a P2PKH (or
+  custom) base lock; `createInscriptionOutput`/`batchInscriptionOutputs` mint the 1-sat output(s).
+- **OrdLock marketplace covenant** (`bsv.Ordinals.buildOrdLock`/`listInscriptionOutput`/
+  `purchaseOrdLock`/`cancelOrdLock`). A trustless "pay the seller or cancel" listing built on the
+  configurable-SIGHASH OP_PUSH_TX core (`SIGHASH_ALL|ANYONECANPAY|FORKID`, new
+  `PushTx.SIGHASH_ALL_ANYONECANPAY_FORKID`): the buyer supplies the surrounding outputs and the
+  covenant binds the required payment output(s) byte-for-byte into the committed `hashOutputs`,
+  while the seller keeps an ECDSA cancel path.
+  - **Multi-output payments**: a listing can pin a seller payment plus royalty and marketplace-fee
+    outputs (`payOutputs` / `royalties`), so a purchase atomically pays every party or fails.
+  - **Self-describing listings**: `parseOrdLock(script)` / `isOrdLock(script)` recover the seller,
+    the pinned payment(s), the total price, and any inline inscription — an indexer/wallet/UI can
+    read a listing straight off-chain.
+  - **End-to-end assembly** covers the whole lifecycle: `buildListingTx({ordinal, seller, price,
+    royalties, funding, fee})` moves a P2PKH ordinal into a listing (sat preserved into output 0),
+    and `buildPurchaseTx({listing, ordinalDestination, funding, fee})` reads the required payment(s)
+    off the listing script and returns a complete, signed purchase — the covenant input grinds the
+    OP_PUSH_TX signature and the P2PKH funding inputs are signed over the finalized tx.
+  Every emitted script (covenant + funding + ordinal inputs) is interpreter-verified across the
+  full list → buy / cancel lifecycle, including adversarial spends (underpay seller/royalty,
+  redirect fee, wrong-key cancel, tamper-after-build) asserted to be rejected. Typed in `bsv.d.ts`
+  (`namespace Ordinals`); documented in `lib/ordinals/README.md`.
+- **BSV-20 / BSV-21 fungible-token inscriptions** (`bsv.Ordinals.BSV20`). Build and parse the
+  `application/bsv-20` JSON payloads carried on 1-sat outputs: v1 ticker tokens
+  (`buildDeploy`/`buildMint`/`buildTransfer`), v2 / BSV-21 id-based supplies
+  (`buildDeployMint`, transfer by `id`), `create*Output` 1-sat outputs, and
+  `parseBsv20`/`isBsv20` (accepting a script, JSON string, or object). Amounts are integer
+  strings — never coerced to JS numbers, so supplies beyond 2^53 stay exact. Builders validate
+  their inputs (ticker ≤ 4 UTF-8 bytes, non-negative integer `amt`/`max`/`lim`, `dec` 0–18,
+  well-formed BSV-21 `id`). Typed in `bsv.d.ts` (`namespace Ordinals.BSV20`).
+- **Trustless SPV** (`bsv.SPV`). `verifyMerkleProof` / `merkleRootFromBranch` / `verifyTxInclusion`
+  verify a transaction's inclusion in a proof-of-work-backed block from a Merkle branch
+  (double-SHA256, internal-LE byte order, TSC `*` odd-node duplication), and `verifyHeaderChain`
+  checks header linkage + per-header proof-of-work against an optional trusted checkpoint. Wired
+  into GDAF's `SmartLedgerAnchor.verifyAnchor`: a new trustless path
+  (`{ spvProof:{index,nodes}, header|headerChain, rawTx }`) proves inclusion + PoW, binds the raw
+  tx to the txid, and checks an OP_RETURN commits to the expected hash — replacing the
+  trust-the-provider stub. Typed in `bsv.d.ts`.
+
+### Changed — BREAKING
+
+- `statuslist.getCredentialStatusEntry` is now **async** and both status functions **require**
+  `expectedIssuerDid` plus a key source (`didResolver` / `issuerJwks` / `issuerPublicJwk`). The CLI
+  `status set`/`check` resolve the issuer key from the key file automatically.
+- `SmartContract.Covenant.createFromP2PKH` **throws** unless the instance is constructed with
+  `{allowNonEnforcing:true}`.
+- Shamir `split()` no longer embeds a secret checksum by default (pass `{checksum:true}` to restore).
+
 ## [5.5.2] - 2026-06-28
 
-Docs-only patch. No API, behavior, or bundle changes — every shipped `.js`
-bundle is byte-identical to 5.5.1.
+Docs-only patch. No API or behavior changes — the only difference in any
+shipped `.js` bundle is the embedded version string (`5.5.1` → `5.5.2`,
+read from `package.json`); the executable code is identical to 5.5.1.
 
 ### Fixed
 

package/README.md

@@ -186,42 +186,42 @@ console.log('Status:', status) // 'revoked'
 ### **Core Modules**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv.min.js** | 1149KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@5.5.2/bsv.min.js` |
-| **bsv.bundle.js** | 1149KB | Everything in one file | `unpkg.com/@smartledger/bsv@5.5.2/bsv.bundle.js` |
+| **bsv.min.js** | 1149KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@6.0.0/bsv.min.js` |
+| **bsv.bundle.js** | 1149KB | Everything in one file | `unpkg.com/@smartledger/bsv@6.0.0/bsv.bundle.js` |
 
 ### **W3C Verifiable Credentials**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **🟢 bsv-didweb.min.js** | 315KB | **DID:web generation** | `unpkg.com/@smartledger/bsv@5.5.2/bsv-didweb.min.js` |
-| **🟢 bsv-vcjwt.min.js** | 315KB | **VC-JWT issue/verify** | `unpkg.com/@smartledger/bsv@5.5.2/bsv-vcjwt.min.js` |
-| **🟢 bsv-statuslist.min.js** | 415KB | **StatusList2021 revocation** | `unpkg.com/@smartledger/bsv@5.5.2/bsv-statuslist.min.js` |
-| **🟢 bsv-anchor.min.js** | 314KB | **BSV anchoring (hash-only)** | `unpkg.com/@smartledger/bsv@5.5.2/bsv-anchor.min.js` |
+| **🟢 bsv-didweb.min.js** | 315KB | **DID:web generation** | `unpkg.com/@smartledger/bsv@6.0.0/bsv-didweb.min.js` |
+| **🟢 bsv-vcjwt.min.js** | 315KB | **VC-JWT issue/verify** | `unpkg.com/@smartledger/bsv@6.0.0/bsv-vcjwt.min.js` |
+| **🟢 bsv-statuslist.min.js** | 415KB | **StatusList2021 revocation** | `unpkg.com/@smartledger/bsv@6.0.0/bsv-statuslist.min.js` |
+| **🟢 bsv-anchor.min.js** | 314KB | **BSV anchoring (hash-only)** | `unpkg.com/@smartledger/bsv@6.0.0/bsv-anchor.min.js` |
 
 ### **Smart Contract & Development**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv-smartcontract.min.js** | 873KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@5.5.2/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 873KB | Covenant operations | `unpkg.com/@smartledger/bsv@5.5.2/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 30KB | Custom script tools | `unpkg.com/@smartledger/bsv@5.5.2/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 30KB | Security enhancements | `unpkg.com/@smartledger/bsv@5.5.2/bsv-security.min.js` |
+| **bsv-smartcontract.min.js** | 873KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@6.0.0/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 873KB | Covenant operations | `unpkg.com/@smartledger/bsv@6.0.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 30KB | Custom script tools | `unpkg.com/@smartledger/bsv@6.0.0/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 30KB | Security enhancements | `unpkg.com/@smartledger/bsv@6.0.0/bsv-security.min.js` |
 
 ### **Legal & Compliance**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv-ltp.min.js** | 1149KB | Legal Token Protocol | `unpkg.com/@smartledger/bsv@5.5.2/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1149KB | Digital Identity & Attestation | `unpkg.com/@smartledger/bsv@5.5.2/bsv-gdaf.min.js` |
+| **bsv-ltp.min.js** | 1149KB | Legal Token Protocol | `unpkg.com/@smartledger/bsv@6.0.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1149KB | Digital Identity & Attestation | `unpkg.com/@smartledger/bsv@6.0.0/bsv-gdaf.min.js` |
 
 ### **Advanced Cryptography**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv-shamir.min.js** | 353KB | Threshold Cryptography | `unpkg.com/@smartledger/bsv@5.5.2/bsv-shamir.min.js` |
+| **bsv-shamir.min.js** | 353KB | Threshold Cryptography | `unpkg.com/@smartledger/bsv@6.0.0/bsv-shamir.min.js` |
 
 ### **Utilities**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv-ecies.min.js** | 79KB | Encryption | `unpkg.com/@smartledger/bsv@5.5.2/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 30KB | Message signing | `unpkg.com/@smartledger/bsv@5.5.2/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 592KB | HD wallets | `unpkg.com/@smartledger/bsv@5.5.2/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 79KB | Encryption | `unpkg.com/@smartledger/bsv@6.0.0/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 30KB | Message signing | `unpkg.com/@smartledger/bsv@6.0.0/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 592KB | HD wallets | `unpkg.com/@smartledger/bsv@6.0.0/bsv-mnemonic.min.js` |
 
 ## ⚡ **2-Minute Quick Start**
 
@@ -232,7 +232,7 @@ Get started with Bitcoin SV development in under 2 minutes:
 npm install @smartledger/bsv
 
 # Or include in HTML
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv.min.js"></script>
 ```
 
 > **🔒 v5.0.0 (production hardening — has breaking changes):** Shamir secret
@@ -332,8 +332,8 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🔧 **Basic Development** (~1.2MB total)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv-script-helper.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const utxos = new bsv.SmartContract.UTXOGenerator().createRealUTXOs(2, 100000);
@@ -342,9 +342,9 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🔒 **Smart Contract Development** (~2.8MB total — each bundle re-embeds core BSV)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().verify().build();
@@ -354,9 +354,9 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🆕 **Legal & Identity Development** (~3.4MB total — each bundle re-embeds core BSV)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -370,9 +370,9 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🆕 **Security & Cryptography** (~1.5MB total)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -384,7 +384,7 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🎯 **Everything Bundle** (~1.1MB)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);           // Shamir Secret Sharing
@@ -494,8 +494,8 @@ const contractTx = covenant.createCovenantTransaction({
 
 #### 1. **Minimal Setup** - Core + Script Helper (~1.2MB)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv-script-helper.min.js"></script>
 <script>
   const tx = new bsv.Transaction();
   const sig = bsvScriptHelper.createSignature(tx, privateKey, 0, script, satoshis);
@@ -504,9 +504,9 @@ const contractTx = covenant.createCovenantTransaction({
 
 #### 2. **DeFi Development** - Core + Covenants + Debug (~2.8MB — each bundle re-embeds core BSV)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = new bsvCovenant.CovenantInterface();
   const debugInfo = SmartContract.interpretScript(script);
@@ -516,8 +516,8 @@ const contractTx = covenant.createCovenantTransaction({
 
 #### 3. **Security First** - Core + Enhanced Security (~1.2MB)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv-security.min.js"></script>
 <script>
   const verified = bsvSecurity.SmartVerify.verify(signature, hash, publicKey);
   const enhanced = bsvSecurity.EllipticFixed.createSignature(privateKey, hash);
@@ -526,7 +526,7 @@ const contractTx = covenant.createCovenantTransaction({
 
 #### 4. **Everything Bundle** - One File Solution (~1.1MB)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.2/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.0/bsv.bundle.js"></script>
 <script>
   // Everything available under bsv namespace
   const keys = bsv.SmartLedgerBundle.generateKeys();
@@ -834,7 +834,7 @@ const timelockScript = helper.createTimelockScript(
 
 See the **[16 Loading Options](#-16-loading-options---choose-your-approach)**
 table near the top for the full list of bundles with current sizes and
-canonical `unpkg.com/@smartledger/bsv@5.5.2/...` URLs.
+canonical `unpkg.com/@smartledger/bsv@6.0.0/...` URLs.
 
 ## 🔐 Security
 

package/bin/cli.js

@@ -43,6 +43,34 @@ function writeJsonFile(filepath, data) {
   fs.writeFileSync(filepath, JSON.stringify(data, null, 2))
 }
 
+// Build the issuer-pinned verification options a status-list read/update needs.
+// Status-list reads MUST verify the list JWT signature against the issuer's key
+// (else revocation is bypassable), so we resolve that key from --jwks <file>, or
+// the issuer key file (--key, default issuer-key.json), plus the issuer DID.
+function loadStatusVerifyOpts(opts, keyData) {
+  var expectedIssuerDid = opts.issuer
+  var issuerJwks = null
+  if (opts.jwks && fs.existsSync(opts.jwks)) {
+    issuerJwks = readJsonFile(opts.jwks)
+  } else {
+    var kd = keyData
+    if (!kd) {
+      var kf = opts.key || 'issuer-key.json'
+      if (fs.existsSync(kf)) kd = readJsonFile(kf)
+    }
+    if (kd && kd.publicJwk) {
+      expectedIssuerDid = expectedIssuerDid || kd.did
+      issuerJwks = { keys: [Object.assign({}, kd.publicJwk, { kid: kd.kid })] }
+    }
+  }
+  if (!expectedIssuerDid || !issuerJwks) {
+    console.error('status verification requires the issuer key (--key issuer-key.json) ' +
+      'or --jwks <file>, plus --issuer <did>')
+    process.exit(1)
+  }
+  return { expectedIssuerDid: expectedIssuerDid, issuerJwks: issuerJwks }
+}
+
 async function main() {
   if (command === '--version' || command === '-v') {
     console.log(pkg.version)
@@ -279,12 +307,13 @@ async function handleStatus(subcommand, opts) {
     console.error('  Index:', opts.index)
     console.error('  Status:', opts.status)
 
-    var result = await statuslist.updateStatusList({
+    var setVerifyOpts = loadStatusVerifyOpts(opts, keyData)
+    var result = await statuslist.updateStatusList(Object.assign({
       listVcJwt: listJwt,
       index: parseInt(opts.index),
       status: opts.status,
       privateJwk: keyData.privateJwk
-    })
+    }, setVerifyOpts))
 
     console.log(result.listVcJwt)
     console.error('✅ Status list updated')
@@ -296,11 +325,12 @@ async function handleStatus(subcommand, opts) {
     }
 
     var listJwt = fs.readFileSync(opts.list, 'utf8').trim()
-    
-    var status = statuslist.getCredentialStatusEntry({
+
+    var checkVerifyOpts = loadStatusVerifyOpts(opts, null)
+    var status = await statuslist.getCredentialStatusEntry(Object.assign({
       listVcJwt: listJwt,
       index: parseInt(opts.index)
-    })
+    }, checkVerifyOpts))
 
     console.log(status)
     console.error('Status at index', opts.index + ':', status)