@typedstandards/verify-core 0.15.0 → 0.15.2

package/CHANGELOG.md

@@ -6,6 +6,40 @@ references are to `npstorey/civic-ai-tools-website` (#119 is the offline-crypto
 hardening arc; #116 is the standalone-verifier arc this package was extracted
 in).
 
+## 0.15.2 — 2026-11-07
+
+The S2-A patch (anchor npstorey/civic-ai-tools#309). **A patch**: no export, signature or type
+changes.
+
+- **The `ai-assisted-analysis/civicaitools-v1` row pins revision 3 of its guidance bundle**
+  (2026-11-07), as hub ADR-0038's amendment of 2026-11-07 records:
+  `https://raw.githubusercontent.com/npstorey/civic-ai-tools/v0.1.15-typed-standards-spec/docs/profiles/ai-assisted-analysis/civicaitools-v1/bundle.json`,
+  SHA-256 `db8175703601a5de9d785a2cda93db194eb05cdeeb222dcfd509ea8ab249f016`. The row's key and
+  `admits` are unchanged. The local copy (not published) is byte-identical to the hub file at
+  tree `d958f067`; its provenance is in `src/__fixtures__/README.md`.
+
+## 0.15.1 — 2026-11-02
+
+The R11 patch (npstorey/civic-ai-tools#293; anchor npstorey/civic-ai-tools#294). **A patch**: no
+export, signature or type changes.
+
+- **Check #8's inclusion verdict requires the log entry to record this record's hash.**
+  `rekorInclusion.inclusionVerified` and `checkpointVerified` are true only when the entry body's
+  `spec.data.hash` is `sha512` with the value `rekorHashForPackage(packageHash)`. That holds for an
+  entry body and proof the input carries (`verifyRecord`) and for an entry `verifyRekorEntry`
+  fetches (its `inclusion`). An entry that does not record the hash, or an empty `packageHash`,
+  reads both false, with the proof's `treeSize` and `leafIndex` and no `reason`.
+  `verifyRekorInclusion` is unchanged: it checks inclusion alone.
+- **Every genuine pairing reads as before.** Over the package objects and the carried log
+  inclusions in this repository's fixtures, and two host-served commitment views, `verifyRecord`
+  gives output deep-equal to 0.15.0's, with the entry carried, fetched, or both.
+- **The `ai-assisted-analysis/civicaitools-v1` row pins revision 2 of its guidance bundle**
+  (2026-11-02), as hub ADR-0038's amendment of 2026-11-02 records:
+  `https://raw.githubusercontent.com/npstorey/civic-ai-tools/v0.1.14-typed-standards-spec/docs/profiles/ai-assisted-analysis/civicaitools-v1/bundle.json`,
+  SHA-256 `45bf3ab479325a791829ed9987f5f291fea44238b54bfb598f32f306f574eb9b`. The row's key and
+  `admits` are unchanged. The local copy (not published) is byte-identical to the hub file at
+  tree `bcd06c5f`; its provenance is in `src/__fixtures__/README.md`.
+
 ## 0.15.0 — 2026-10-30
 
 The R10 release (civic-ai-tools#289; hub ADR-0038 §3, §5 and §6, specification v0.1.13 §8.1.1,

package/dist/profiles.d.ts

@@ -33,9 +33,9 @@ export interface ProducerProfileSubtypeRow {
 }
 /**
  * The subtype table, keyed by the full `producerProfile` value. The
- * `ai-assisted-analysis/civicaitools-v1` bundle is revision 1 (2026-10-30), as
- * hub ADR-0038 §5 records its address and digest; a later revision moves the
- * digest and this pin, and nothing else.
+ * `ai-assisted-analysis/civicaitools-v1` bundle is revision 3 (2026-11-07), as
+ * hub ADR-0038's amendment of 2026-11-07 records its address and digest; a later
+ * revision moves the digest and this pin, and nothing else.
  */
 export declare const PRODUCER_PROFILE_SUBTYPES: Readonly<Record<string, ProducerProfileSubtypeRow>>;
 /**

package/dist/profiles.js

@@ -45,9 +45,9 @@ export function captureVocabForProfile(producerProfile, contentProfile) {
 }
 /**
  * The subtype table, keyed by the full `producerProfile` value. The
- * `ai-assisted-analysis/civicaitools-v1` bundle is revision 1 (2026-10-30), as
- * hub ADR-0038 §5 records its address and digest; a later revision moves the
- * digest and this pin, and nothing else.
+ * `ai-assisted-analysis/civicaitools-v1` bundle is revision 3 (2026-11-07), as
+ * hub ADR-0038's amendment of 2026-11-07 records its address and digest; a later
+ * revision moves the digest and this pin, and nothing else.
  */
 export const PRODUCER_PROFILE_SUBTYPES = Object.freeze({
     // No bundle pinned: the integration partner's, not this table's to name.
@@ -55,8 +55,8 @@ export const PRODUCER_PROFILE_SUBTYPES = Object.freeze({
     'ai-assisted-analysis/civicaitools-v1': Object.freeze({
         admits: Object.freeze(['datHere', 'default']),
         bundle: Object.freeze({
-            url: 'https://raw.githubusercontent.com/npstorey/civic-ai-tools/v0.1.13-typed-standards-spec/docs/profiles/ai-assisted-analysis/civicaitools-v1/bundle.json',
-            sha256: '724e399e02db8993041b64982eec731505084bec2ec5e6ca58fda2de8087a281',
+            url: 'https://raw.githubusercontent.com/npstorey/civic-ai-tools/v0.1.15-typed-standards-spec/docs/profiles/ai-assisted-analysis/civicaitools-v1/bundle.json',
+            sha256: 'db8175703601a5de9d785a2cda93db194eb05cdeeb222dcfd509ea8ab249f016',
         }),
     }),
 });

package/dist/rekor-binding.d.ts

@@ -0,0 +1,12 @@
+import { type RekorInclusionProof, type RekorInclusionResult } from './rekor-inclusion.ts';
+/** Whether a log entry body records `packageHash`: `spec.data.hash` is `sha512`
+ *  with the value `rekorHashForPackage(packageHash)`. An empty hash, or a body that
+ *  does not decode, records nothing. */
+export declare function entryRecordsPackage(entryBody: string | Uint8Array, packageHash: string): boolean;
+/**
+ * Check 8's inclusion verdict for a record. An entry that does not record
+ * `packageHash` reads `inclusionVerified: false` and `checkpointVerified: false`,
+ * with the proof's `treeSize` and `leafIndex` and no `reason` (the proof is not
+ * evaluated). Otherwise the verdict is `verifyRekorInclusion`'s.
+ */
+export declare function verifyRekorInclusionForRecord(entryBody: string | Uint8Array, inclusionProof: RekorInclusionProof, packageHash: string): RekorInclusionResult;

package/dist/rekor-binding.js

@@ -0,0 +1,48 @@
+// Check 8's inclusion verdict, bound to the record (spec §9.2 check #8) —
+// browser-safe, offline.
+//
+// `verifyRekorInclusion` says whether a log entry is in a log the pinned key
+// vouches for. A verdict about a record also needs the entry to be that record's:
+// its body's `spec.data.hash` is `sha512` with the value
+// `rekorHashForPackage(packageHash)`, the comparison `verifyRekorEntry` makes for
+// hash parity. Both sources of a verdict read it here: the entry body and proof an
+// input carries (`verifyRecord`) and an entry `verifyRekorEntry` fetches.
+//
+// Internal: `index.ts` does not re-export this module.
+import { base64ToBytes } from "./primitives.js";
+import { rekorHashForPackage } from "./signature.js";
+import { verifyRekorInclusion, } from "./rekor-inclusion.js";
+/** Whether a log entry body records `packageHash`: `spec.data.hash` is `sha512`
+ *  with the value `rekorHashForPackage(packageHash)`. An empty hash, or a body that
+ *  does not decode, records nothing. */
+export function entryRecordsPackage(entryBody, packageHash) {
+    if (!packageHash)
+        return false;
+    try {
+        const bytes = typeof entryBody === 'string' ? base64ToBytes(entryBody) : entryBody;
+        const body = JSON.parse(new TextDecoder().decode(bytes));
+        const hash = body
+            ?.spec?.data?.hash;
+        return hash?.algorithm === 'sha512' && hash.value === rekorHashForPackage(packageHash);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Check 8's inclusion verdict for a record. An entry that does not record
+ * `packageHash` reads `inclusionVerified: false` and `checkpointVerified: false`,
+ * with the proof's `treeSize` and `leafIndex` and no `reason` (the proof is not
+ * evaluated). Otherwise the verdict is `verifyRekorInclusion`'s.
+ */
+export function verifyRekorInclusionForRecord(entryBody, inclusionProof, packageHash) {
+    if (!entryRecordsPackage(entryBody, packageHash)) {
+        return {
+            inclusionVerified: false,
+            checkpointVerified: false,
+            treeSize: inclusionProof.treeSize,
+            leafIndex: inclusionProof.logIndex,
+        };
+    }
+    return verifyRekorInclusion(entryBody, inclusionProof);
+}

package/dist/rekor-inclusion.d.ts

@@ -53,7 +53,9 @@ export interface RekorInclusionResult {
     origin?: string;
     /** The matched anchor's key hint (hex), for display / provenance. */
     keyHint?: string;
-    /** The first thing that failed, when not fully verified. */
+    /** The first thing that failed, when not fully verified. Absent when
+     *  `verifyRecord` or `verifyRekorEntry` found that the entry does not record the
+     *  package's hash: the proof is then not evaluated. */
     reason?: RekorInclusionFailReason;
 }
 /**
@@ -103,7 +105,9 @@ export declare function verifyCheckpointSignature(checkpoint: ParsedCheckpoint,
  * is the carried `verification.inclusionProof`. Returns a graded verdict:
  * `inclusionVerified` (the proof folds to its root) and `checkpointVerified` (that
  * root is in a checkpoint a pinned log key signed). The strong property — "this
- * entry is in a log the sigstore key vouches for" — is both being true.
+ * entry is in a log the sigstore key vouches for" — is both being true. This
+ * export checks inclusion alone; `verifyRecord` (`verifyEvidence`) applies the
+ * record binding.
  */
 export declare function verifyRekorInclusion(entryBody: string | Uint8Array, inclusionProof: RekorInclusionProof, anchors?: readonly RekorLogAnchor[]): RekorInclusionResult;
 export {};

package/dist/rekor-inclusion.js

@@ -239,7 +239,9 @@ export function verifyCheckpointSignature(checkpoint, anchors) {
  * is the carried `verification.inclusionProof`. Returns a graded verdict:
  * `inclusionVerified` (the proof folds to its root) and `checkpointVerified` (that
  * root is in a checkpoint a pinned log key signed). The strong property — "this
- * entry is in a log the sigstore key vouches for" — is both being true.
+ * entry is in a log the sigstore key vouches for" — is both being true. This
+ * export checks inclusion alone; `verifyRecord` (`verifyEvidence`) applies the
+ * record binding.
  */
 export function verifyRekorInclusion(entryBody, inclusionProof, anchors = REKOR_LOG_ANCHORS) {
     const base = {

package/dist/rekor.d.ts

@@ -7,7 +7,8 @@ export interface RekorVerifyResult {
     integratedTime?: number;
     logEntryUrl?: string;
     /** Cryptographic Merkle-inclusion verdict (#119), when the fetched entry carries
-     *  an inclusion proof. Additive — `verified` (hash-parity) is unchanged. */
+     *  an inclusion proof; not verified when the entry does not record this package's
+     *  hash. Additive — `verified` (hash-parity) is unchanged. */
     inclusion?: RekorInclusionResult;
 }
 /**

package/dist/rekor.js

@@ -9,7 +9,7 @@
 // instead of `Buffer`, and the network fetch is injected.
 import { rekorHashForPackage } from "./signature.js";
 import { base64ToBytes } from "./primitives.js";
-import { verifyRekorInclusion, } from "./rekor-inclusion.js";
+import { verifyRekorInclusionForRecord } from "./rekor-binding.js";
 /**
  * Verify that a Rekor transparency log entry is consistent with a published
  * package.
@@ -43,9 +43,11 @@ export async function verifyRekorEntry(entryId, packageHash, options = {}) {
         const verified = recordedAlgo === 'sha512' && recordedHash === expectedHash;
         // Deepen #8 (civic-ai-tools-website#119): when the entry carries an inclusion
         // proof, cryptographically verify Merkle inclusion against the pinned log key —
-        // the same offline check a carried bundle runs, here over the fetched entry.
+        // the same offline check a carried bundle runs, here over the fetched entry, and
+        // bound to this record: an entry that does not record `packageHash` is not
+        // verified (`rekor-binding.ts`).
         const proof = entry.verification?.inclusionProof;
-        const inclusion = proof && entry.body ? verifyRekorInclusion(entry.body, proof) : undefined;
+        const inclusion = proof && entry.body ? verifyRekorInclusionForRecord(entry.body, proof, packageHash) : undefined;
         return {
             verified,
             logIndex: entry.logIndex,

package/dist/verify.d.ts

@@ -140,7 +140,8 @@ export interface VerifyResult {
     } | null;
     rekorIntegratedTime?: number;
     /** Cryptographic Merkle-inclusion verdict (#119): null when no proof was
-     *  available, else the graded result (`inclusionVerified` / `checkpointVerified`).
+     *  available, else the graded result (`inclusionVerified` / `checkpointVerified`),
+     *  both false when the log entry does not record `packageHash`.
      *  Additive to `rekorVerified` (hash-parity). */
     rekorInclusion: RekorInclusionResult | null;
     hasRekor: boolean;

package/dist/verify.js

@@ -31,7 +31,7 @@
 import { recomputePackageHash } from "./checks.js";
 import { verifySignature } from "./signature.js";
 import { verifyRekorEntry } from "./rekor.js";
-import { verifyRekorInclusion, } from "./rekor-inclusion.js";
+import { verifyRekorInclusionForRecord } from "./rekor-binding.js";
 import { verifyRfc3161Timestamp } from "./rfc3161.js";
 import { verifyKeyTrust, legacyEmbeddedKeyTrust, } from "./trust-registry.js";
 import { applyKeyDerivedRegistryRule, applySelfCertifiedKeyTrust, compareKeyDerivedIdentifier, } from "./self-certifying.js";
@@ -128,6 +128,7 @@ export async function verifyRecord(input, deps) {
     // Merkle inclusion (#119) is verified cryptographically. The carried proof + body
     // verify inclusion OFFLINE (no fetch); otherwise the online fetch's entry carries
     // the proof. Carried-offline takes precedence — it is the zero-dependency property.
+    // Either way the entry must record this record's hash (`rekor-binding.ts`).
     let rekorVerified = null;
     let rekorDetails = null;
     let rekorIntegratedTime;
@@ -146,7 +147,7 @@ export async function verifyRecord(input, deps) {
             rekorInclusion = rekorResult.inclusion;
     }
     if (input.rekorInclusionProof && input.rekorEntryBody) {
-        rekorInclusion = verifyRekorInclusion(input.rekorEntryBody, input.rekorInclusionProof);
+        rekorInclusion = verifyRekorInclusionForRecord(input.rekorEntryBody, input.rekorInclusionProof, packageHash);
     }
     // Step 3c — RFC 3161 timestamp (check #7, deep). Presence is `hasTimestamp`; when a
     // token + package hash are present, cryptographically verify the TSA signature over

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@typedstandards/verify-core",
-  "version": "0.15.0",
+  "version": "0.15.2",
   "description": "Portable, browser-safe verification core for Typed Standards record packages — the §9.2 check suite, single-sourced so it verifies identically on a server and in the browser.",
   "license": "MIT",
   "author": "Nathan Storey",
@@ -37,7 +37,7 @@
   },
   "devDependencies": {
     "@types/node": "^22",
-    "typescript": "^5.9.3"
+    "typescript": "^6.0.3"
   },
   "engines": {
     "node": ">=18"