@veraanchor/verifier 0.0.0-stage → 0.1.0

package/dist/triangulation/publicV1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publicV1.js","sourceRoot":"","sources":["../../src/triangulation/publicV1.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mCAAmC,EAAE,kCAAkC,EAC5C,MAAM,uCAAuC,CAAC;AAGlF,OAAO,EAAE,0BAA0B,EACI,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,8BAA8B,EACC,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EACL,MAAM,mCAAmC,CAAC;AAqBjG,MAAM,aAAa,GAAG,+BAA+B,CAAC;AACtD,MAAM,wBAAwB,GAAG,sCAAsC,CAAC;AACxE,MAAM,mBAAmB,GAAG,wCAAwC,CAAC;AAErE,SAAS,eAAe,CAAC,OAA4B;IACnD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACjF,MAAM,IAAI,SAAS,CAAC,iFAAiF,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,OAAO,CAAC,cAAc,CAAC;AAChC,CAAC;AACD,SAAS,YAAY,CAAC,GAAW,EAAE,MAAc;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,aAAsB,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;AACpF,CAAC;AACD,SAAS,SAAS,CAAC,GAAW,EAAE,KAAsB;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,WAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;AACpE,CAAC;AACD,SAAS,gBAAgB,CAAC,OAA6B,EAAE,UAAuC;IAC9F,MAAM,SAAS,GAAG,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC;IACvD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,mBAAmB,CAAC;IACzD,MAAM,IAAI,GAAG,OAAO,KAAK,SAAS;QAChC,CAAC,CAAC,CAAC,+BAA+B,EAAE,aAAa,CAAC;QAClD,CAAC,CAAC,CAAC,qCAAqC,EAAE,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,UAAU,CAAC,WAAW,IAAI,oCAAoC,CAAC,CAAC,CAAC;IAC/I,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS;QACjC,wGAAwG;QACxG,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC;KACrD,CAAC,CAAC;AACL,CAAC;AACD,SAAS,iBAAiB,CACxB,OAA4B,EAC5B,GAAiC,EACjC,UAAuC;IAEvC,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,2BAA2B,CAAC;IAChE,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,WAAW,IAAI,yCAAyC,CAAC;IAC9F,MAAM,OAAO,GAAG,KAAK,EAAE,KAAK,IAAI;QAC9B,YAAY,CAAC,8BAA8B,EAAE,MAAM,CAAC;QACpD,YAAY,CAAC,2BAA2B,EAAE,MAAM,CAAC;KAClD,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,eAAe;QAClC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;QACtC,MAAM,EAAE,eAAwB;QAChC,WAAW,EAAE,gCAAgC;QAC7C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,OAAO;YACV,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,sBAAsB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,sBAAsB,EAAE,iCAAiC,CAAC;YACzI,GAAG,EAAE,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;gBAC5F,YAAY,CAAC,6BAA6B,EAAE,iCAAiC,CAAC;SACjF,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AACD,SAAS,KAAK,CAAC,OAA6B;IAC1C,MAAM,iBAAiB,GAAG,OAAO,KAAK,SAAS;QAC7C,CAAC,CAAC;YACE,EAAE,GAAG,EAAE,qBAAqB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,SAAS,EAAE,qBAAqB,EAAE;YACjG,EAAE,GAAG,EAAE,qBAAqB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,+BAA+B,EAAE;YACzG,EAAE,GAAG,EAAE,yBAAyB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,SAAS,EAAE,aAAa,EAAE;SAC9F;QACH,CAAC,CAAC;YACE,EAAE,GAAG,EAAE,oBAAoB,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE;YAChF,EAAE,GAAG,EAAE,sBAAsB,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe,EAAE;YACtF,EAAE,GAAG,EAAE,qBAAqB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,qCAAqC,EAAE;YAC/G,EAAE,GAAG,EAAE,yBAAyB,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,wBAAwB,EAAE;YAChG,EAAE,GAAG,EAAE,2BAA2B,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,mBAAmB,EAAE;SAChG,CAAC;IACN,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,MAAM,CAAC;YACZ,EAAE,EAAE,wBAAiC;YACrC,mBAAmB,EAAE,GAAG,OAAO,SAAS;YACxC,oBAAoB,EAAE,GAAG,OAAO,gBAAgB;YAChD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC;SAC9C,CAAC;QACF,MAAM,CAAC,MAAM,CAAC;YACZ,EAAE,EAAE,sBAA+B;YACnC,mBAAmB,EAAE,GAAG,OAAO,eAAe;YAC9C,oBAAoB,EAAE,GAAG,OAAO,gBAAgB;YAChD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;gBACzB,EAAE,GAAG,EAAE,mBAAmB,EAAE,QAAQ,EAAE,sBAAsB,EAAE,SAAS,EAAE,iBAAiB,EAAE;gBAC5F,EAAE,GAAG,EAAE,sBAAsB,EAAE,QAAQ,EAAE,6BAA6B,EAAE,SAAS,EAAE,wBAAwB,EAAE;gBAC7G,EAAE,GAAG,EAAE,kBAAkB,EAAE,QAAQ,EAAE,8BAA8B,EAAE,SAAS,EAAE,8BAA8B,EAAE;gBAChH,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,2BAA2B,EAAE,SAAS,EAAE,2BAA2B,EAAE;aACxG,CAAC;SACH,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AACD,KAAK,UAAU,OAAO,CACpB,MAAmC,EACnC,OAA6B,EAC7B,YAAgC,EAChC,cAA2C;IAE3C,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC;IAC5C,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,cAAc,CAAC,aAAa,CAAC,WAAW,CAAC;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,0BAA0B,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChG,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;IAChE,MAAM,iBAAiB,GAAG,cAAc,CAAC,UAAU,CAAC,mBAAmB,CAAC;IACxE,MAAM,YAAY,GAAG;QACnB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,OAAO;QACP,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;IACF,6FAA6F;IAC7F,MAAM,YAAY,GAAuB,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,YAAY;QACtE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,OAAO,SAAS;YACnG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK;gBACtE,SAAS,CAAC,mBAAmB,EAAE,OAAO,CAAC,EAAE,CAAC;aAC3C,CAAC,EAAE,CAAC,CAAC,CAAC;KACV,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,8BAA8B,CAAC;QAC9C,aAAa,EAAE,YAAY;QAC3B,YAAY;QACZ,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAC;IACH,MAAM,KAAK,GAAwB,MAAM,CAAC,MAAM,CAAC;QAC/C,QAAQ,EAAE,4CAA4C;QACtD,OAAO,EAAE,eAAwB;QACjC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,oCAAoC;QACtG,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC,CAAC;IACH,MAAM,SAAS,GAA0B,EAAE,CAAC;IAC5C,IAAI,cAAc,CAAC,aAAa,CAAC,MAAM,KAAK,UAAU;QAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACnF,QAAQ,EAAE,mCAAmC,EAAE,OAAO,EAAE,MAAe;YACvE,WAAW,EAAE,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;SAC1F,CAAC,CAAC,CAAC;IACJ,IAAI,cAAc,CAAC,UAAU,CAAC,MAAM,KAAK,UAAU;QAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAChF,QAAQ,EAAE,sCAAsC,EAAE,OAAO,EAAE,MAAe;YAC1E,WAAW,EAAE,cAAc,CAAC,UAAU,CAAC,WAAW,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;SACvF,CAAC,CAAC,CAAC;IACJ,IAAI,MAAM,EAAE,MAAM,KAAK,UAAU;QAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAC9D,QAAQ,EAAE,kCAAkC,EAAE,OAAO,EAAE,MAAe;YACtE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;SACpE,CAAC,CAAC,CAAC;IACJ,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,UAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW;QAC1E,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC;QAC1H,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;YACxB,aAAa,EAAE,cAAc,CAAC,aAAa,CAAC,MAAM;YAClD,sBAAsB,EAAE,cAAc,CAAC,UAAU,CAAC,MAAM;YACxD,aAAa,EAAE,MAAM,EAAE,MAAM,IAAI,eAAe;SACjD,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,8GAA8G;AAC9G,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAmC,EACnC,KAA2B;IAE3B,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IAClH,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,mCAAmC,CAAC,MAAM,CAAC,QAAQ,EAAE;QAC3E,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO;KAC9C,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAmC,EACnC,KAAuC;IAEvC,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,kCAAkC,CAAC,MAAM,CAAC,QAAQ,EAAE;QAC1E,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QAC1C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,OAAO;KACR,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC"}

package/dist/verification/sourceIntentV1.d.ts

@@ -0,0 +1,15 @@
+import type { VerificationIntent, VerificationReport } from "../contracts/verification.js";
+import { type DatasetV1SourceInput } from "../profiles/dataset/sourceV1.js";
+import { type IngestV1SourceInput } from "../profiles/ingest/sourceV1.js";
+/** Offline, read-only verification. Neither API authenticates a receipt's issuer or ledger publication. */
+export type DatasetV1IntentInput = DatasetV1SourceInput & Readonly<{
+    intent: VerificationIntent;
+}>;
+export type IngestV1IntentInput = IngestV1SourceInput & Readonly<{
+    intent: VerificationIntent;
+}>;
+/** Source bytes and caller expectations, without claiming independent receipt authentication. */
+export declare function verifyDatasetV1WithIntent(input: DatasetV1IntentInput): Promise<VerificationReport>;
+/** Source material and caller expectations, with independent bundle/receipt comparison. */
+export declare function verifyIngestV1WithIntent(input: IngestV1IntentInput): Promise<VerificationReport>;
+//# sourceMappingURL=sourceIntentV1.d.ts.map

package/dist/verification/sourceIntentV1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourceIntentV1.d.ts","sourceRoot":"","sources":["../../src/verification/sourceIntentV1.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAIV,kBAAkB,EAGlB,kBAAkB,EAEnB,MAAM,8BAA8B,CAAC;AAOtC,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,iCAAiC,CAAC;AAOzC,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AAmBxC,2GAA2G;AAC3G,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,GAAG,QAAQ,CAAC;IAAE,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC,CAAC;AACnG,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,GAAG,QAAQ,CAAC;IAAE,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC,CAAC;AAsLjG,iGAAiG;AACjG,wBAAsB,yBAAyB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAwBxG;AAED,2FAA2F;AAC3F,wBAAsB,wBAAwB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA0BtG"}

package/dist/verification/sourceIntentV1.js

@@ -0,0 +1,206 @@
+import { verifyDatasetV1Bundle, verifyDatasetV1Receipt, } from "../profiles/dataset/v1.js";
+import { verifyDatasetV1Sources, } from "../profiles/dataset/sourceV1.js";
+import { verifyIngestV1Bundle, verifyIngestV1Pair, } from "../profiles/ingest/v1.js";
+import { verifyIngestV1Sources, } from "../profiles/ingest/sourceV1.js";
+const HEX_512 = /^[a-f0-9]{128}$/i;
+const EXPECTED_KEY = /^[a-z][a-z0-9_]{0,63}$/;
+const MAX_EXPECTATIONS = 32;
+function fact(key, value) {
+    return Object.freeze({ key, state: "available", value });
+}
+function observation(id, subject, source, facts) {
+    return Object.freeze({ id, subject: Object.freeze({ ...subject }), source, facts: Object.freeze([...facts]) });
+}
+function finding(check_id, outcome, reason_code, observation_ids) {
+    return Object.freeze({ check_id, outcome, reason_code, observation_ids: Object.freeze([...observation_ids]) });
+}
+function checkedIntent(intent) {
+    if (!intent || typeof intent !== "object" || !intent.subject || typeof intent.subject !== "object") {
+        throw new TypeError("Verification intent must have a subject");
+    }
+    const subject = intent.subject;
+    if (typeof subject.id !== "string" || subject.id.length === 0 || subject.id.length > 256 || subject.id.trim() !== subject.id) {
+        throw new TypeError("Verification subject must have a bounded, canonical ID");
+    }
+    if (subject.hedera_network !== undefined && subject.hedera_network !== "testnet" && subject.hedera_network !== "mainnet") {
+        throw new TypeError("Invalid expected Hedera network");
+    }
+    if (!Array.isArray(intent.expected) || intent.expected.length > MAX_EXPECTATIONS) {
+        throw new TypeError("Verification expectations must be a bounded array");
+    }
+    const used = new Set();
+    for (const commitment of intent.expected) {
+        if (!commitment || typeof commitment !== "object" || typeof commitment.key !== "string" || !EXPECTED_KEY.test(commitment.key)) {
+            throw new TypeError("Invalid commitment expectation key");
+        }
+        if (used.has(commitment.key))
+            throw new TypeError("Duplicate commitment expectation key");
+        used.add(commitment.key);
+        if (commitment.kind !== "digest" && commitment.kind !== "merkle-root") {
+            throw new TypeError("Unsupported commitment expectation kind");
+        }
+        if (commitment.kind === "digest" && (typeof commitment.digest !== "string" || !HEX_512.test(commitment.digest))) {
+            throw new TypeError("Expected digest must be a SHA3-512 hex commitment");
+        }
+        if (commitment.kind === "merkle-root" && (typeof commitment.root_hash !== "string" || !HEX_512.test(commitment.root_hash) ||
+            !Number.isSafeInteger(commitment.leaf_count) || commitment.leaf_count < 1)) {
+            throw new TypeError("Invalid expected Merkle root or leaf count");
+        }
+    }
+    return intent;
+}
+function commitmentClaim(profile, key, bundle) {
+    if (key === "bundle_digest") {
+        return { value: bundle.bundle_digest, domain: `va:${profile}:bundle:v1` };
+    }
+    if (key === "idempotency_key") {
+        return { value: bundle.idempotency_key, domain: `va:${profile}:idem:v1` };
+    }
+    if (profile === "dataset" && key === "dataset_fingerprint") {
+        return { value: bundle.dataset_fingerprint, domain: "va:dataset:fingerprint:v1" };
+    }
+    if (profile === "ingest" && key === "fingerprint") {
+        return { value: bundle.fingerprint, domain: "va:ingest:fingerprint:v1" };
+    }
+    return undefined;
+}
+function compareExpected(expected, values, observations) {
+    const check = `intent.commitment.${expected.key}`;
+    if (expected.kind === "merkle-root") {
+        const algorithm = values.profile === "dataset" ? "hf-dataset-v1" : "hf-ingest-v1";
+        if (expected.key !== "merkle_root" || expected.tree_alg !== algorithm) {
+            return finding(check, "unsupported", "COMMITMENT_CONTRACT_UNSUPPORTED", []);
+        }
+        if (values.sourceRoot === undefined || !values.sourceValid || !values.bundleValid) {
+            return finding(check, "indeterminate", "SOURCE_BINDING_NOT_ESTABLISHED", observations);
+        }
+        const matches = expected.root_hash.toLowerCase() === values.sourceRoot && expected.leaf_count === values.sourceCount;
+        return finding(check, matches ? "pass" : "fail", matches ? null : "EXPECTED_MERKLE_MISMATCH", observations);
+    }
+    const claim = commitmentClaim(values.profile, expected.key, values.bundle);
+    if (!claim || expected.contract !== "hf-contract-v1" || expected.material !== "json" || expected.domain !== claim.domain) {
+        return finding(check, "unsupported", "COMMITMENT_CONTRACT_UNSUPPORTED", []);
+    }
+    if (!values.sourceValid || !values.bundleValid) {
+        return finding(check, "indeterminate", "SOURCE_BINDING_NOT_ESTABLISHED", observations);
+    }
+    const matches = expected.digest.toLowerCase() === claim.value;
+    return finding(check, matches ? "pass" : "fail", matches ? null : "EXPECTED_DIGEST_MISMATCH", observations);
+}
+function report(intent, values) {
+    checkedIntent(intent);
+    const prefix = values.profile;
+    const sourceId = `${prefix}.source`;
+    const bundleId = `${prefix}.bundle`;
+    const receiptId = `${prefix}.receipt`;
+    const bundle = values.bundle;
+    const sourceFacts = [
+        fact("source_file_or_item_count", values.sourceCount),
+        fact("source_total_bytes", values.sourceBytes),
+        ...(values.sourceRoot === undefined ? [] : [fact("source_merkle_root", values.sourceRoot)]),
+    ];
+    const bundleFacts = [
+        fact("bundle_digest", bundle.bundle_digest),
+        fact("idempotency_key", bundle.idempotency_key),
+        fact("declared_file_or_item_count", "file_count" in bundle ? bundle.file_count : bundle.item_count),
+        fact("declared_total_bytes", bundle.total_bytes),
+        fact(values.profile === "dataset" ? "dataset_fingerprint" : "fingerprint", "dataset_fingerprint" in bundle ? bundle.dataset_fingerprint : bundle.fingerprint),
+    ];
+    const contentSubject = { kind: values.subject.kind, id: values.subject.id };
+    const observations = [
+        observation(sourceId, contentSubject, "local_computation", sourceFacts),
+        observation(bundleId, contentSubject, "local_computation", bundleFacts),
+    ];
+    if (values.receipt) {
+        observations.push(observation(receiptId, values.subject, "provided_evidence", [
+            fact("receipt_id_recomputed", values.receipt.receipt_id),
+            fact("receipt_declared_network", values.receipt.hedera_network),
+        ]));
+    }
+    const findings = [
+        finding(`${prefix}.source_binding`, values.sourceValid ? "pass" : "fail", values.sourceValid ? null : "SOURCE_MISMATCH", [sourceId, bundleId]),
+        finding(`${prefix}.bundle_consistency`, values.bundleValid ? "pass" : "fail", values.bundleValid ? null : "BUNDLE_MISMATCH", [bundleId]),
+        finding(`${prefix}.receipt_binding`, values.receiptBindingValid === null ? "indeterminate" : values.receiptBindingValid ? "pass" : "fail", values.receiptBindingValid === null ? "RECEIPT_NOT_SUPPLIED" : values.receiptBindingValid ? null : "RECEIPT_OR_BINDING_MISMATCH", values.receipt ? [bundleId, receiptId] : []),
+    ];
+    const subjectMatch = intent.subject.kind === values.subject.kind && intent.subject.id === values.subject.id;
+    findings.push(finding("intent.subject", !subjectMatch ? "fail" : values.sourceValid && values.bundleValid ? "pass" : "indeterminate", !subjectMatch ? "SUBJECT_MISMATCH" : values.sourceValid && values.bundleValid ? null : "SOURCE_BINDING_NOT_ESTABLISHED", [sourceId, bundleId]));
+    if (intent.subject.hedera_network !== undefined) {
+        const claimedNetwork = values.receipt?.hedera_network;
+        if (!claimedNetwork) {
+            findings.push(finding("intent.declared_network", "indeterminate", "NETWORK_EVIDENCE_UNAVAILABLE", values.receipt ? [receiptId] : []));
+        }
+        else if (claimedNetwork !== intent.subject.hedera_network) {
+            findings.push(finding("intent.declared_network", "fail", "NETWORK_MISMATCH", [receiptId]));
+        }
+        else if (!values.receiptBindingValid) {
+            findings.push(finding("intent.declared_network", "indeterminate", "RECEIPT_BINDING_NOT_ESTABLISHED", [receiptId]));
+        }
+        else {
+            findings.push(finding("intent.declared_network", "pass", null, [receiptId]));
+        }
+    }
+    for (const expected of intent.expected) {
+        findings.push(compareExpected(expected, values, [sourceId, bundleId]));
+    }
+    return Object.freeze({
+        intent: Object.freeze({
+            subject: Object.freeze({ ...intent.subject }),
+            expected: Object.freeze(intent.expected.map((expectation) => Object.freeze({ ...expectation }))),
+        }),
+        findings: Object.freeze(findings),
+        observations: Object.freeze(observations),
+    });
+}
+/** Source bytes and caller expectations, without claiming independent receipt authentication. */
+export async function verifyDatasetV1WithIntent(input) {
+    checkedIntent(input.intent);
+    const source = await verifyDatasetV1Sources(input);
+    const bundle = verifyDatasetV1Bundle(input.bundle);
+    const receipt = input.receipt === undefined ? undefined : verifyDatasetV1Receipt(input.receipt);
+    const actual = bundle.computed;
+    const sourceValid = !source.mismatches.some((entry) => !entry.field.startsWith("bundle.") && !entry.field.startsWith("receipt.") &&
+        !entry.field.startsWith("binding.") && entry.field !== "sources.receipt_merkle_root");
+    const receiptBindingValid = receipt === undefined ? null :
+        receipt.ok && bundle.ok && !source.mismatches.some((entry) => entry.field.startsWith("binding.") || entry.field === "sources.receipt_merkle_root");
+    return report(input.intent, {
+        profile: "dataset",
+        subject: { kind: "dataset", id: actual.dataset_key, ...(receipt?.computed.hedera_network ? { hedera_network: receipt.computed.hedera_network } : {}) },
+        bundle: actual,
+        ...(receipt ? { receipt: receipt.computed } : {}),
+        sourceRoot: source.computed.source_merkle_root,
+        sourceCount: source.computed.source_file_count,
+        sourceBytes: source.computed.source_total_bytes,
+        sourceValid,
+        bundleValid: bundle.ok,
+        receiptBindingValid,
+    });
+}
+/** Source material and caller expectations, with independent bundle/receipt comparison. */
+export async function verifyIngestV1WithIntent(input) {
+    checkedIntent(input.intent);
+    const source = await verifyIngestV1Sources(input);
+    const bundle = verifyIngestV1Bundle(input.bundle);
+    const pair = input.receipt === undefined ? undefined : verifyIngestV1Pair({ bundle: input.bundle, receipt: input.receipt });
+    const receipt = pair?.computed.receipt;
+    const sourceMismatches = input.receipt === undefined
+        ? source.mismatches.slice(bundle.mismatches.length)
+        : source.mismatches.filter((entry) => !entry.field.startsWith("bundle.") &&
+            !entry.field.startsWith("receipt.") && !entry.field.startsWith("binding.") &&
+            entry.field !== "sources.receipt_merkle_root");
+    const sourceValid = sourceMismatches.length === 0;
+    const receiptBindingValid = pair === undefined ? null :
+        pair.ok && !source.mismatches.some((entry) => entry.field === "sources.receipt_merkle_root");
+    return report(input.intent, {
+        profile: "ingest",
+        subject: { kind: "ingest", id: bundle.computed.object_key, ...(receipt?.hedera_network ? { hedera_network: receipt.hedera_network } : {}) },
+        bundle: bundle.computed,
+        ...(receipt ? { receipt } : {}),
+        sourceRoot: source.computed.source_merkle_root,
+        sourceCount: source.computed.source_item_count,
+        sourceBytes: source.computed.source_total_bytes,
+        sourceValid,
+        bundleValid: bundle.ok,
+        receiptBindingValid,
+    });
+}
+//# sourceMappingURL=sourceIntentV1.js.map

package/dist/verification/sourceIntentV1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourceIntentV1.js","sourceRoot":"","sources":["../../src/verification/sourceIntentV1.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GAGvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,GAEvB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,oBAAoB,EACpB,kBAAkB,GAGnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,GAEtB,MAAM,gCAAgC,CAAC;AAuBxC,MAAM,OAAO,GAAG,kBAAkB,CAAC;AACnC,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAC9C,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,SAAS,IAAI,CAAC,GAAW,EAAE,KAAuC;IAChE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,WAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,WAAW,CAClB,EAAU,EACV,OAA4B,EAC5B,MAAyC,EACzC,KAAkC;IAElC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACjH,CAAC;AAED,SAAS,OAAO,CACd,QAAgB,EAChB,OAA4B,EAC5B,WAA0B,EAC1B,eAAkC;IAElC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC;AACjH,CAAC;AAED,SAAS,aAAa,CAAC,MAA0B;IAC/C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACnG,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;QAC7H,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzH,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACjF,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzC,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9H,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAC1F,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACtE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAChH,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa,IAAI,CACvC,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAC/E,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,GAAG,CAAC,CAC1E,EAAE,CAAC;YACF,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB,EAAE,GAAW,EAAE,MAAoB;IAC1E,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,OAAO,YAAY,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,OAAO,UAAU,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,GAAG,KAAK,qBAAqB,EAAE,CAAC;QAC3D,OAAO,EAAE,KAAK,EAAG,MAAkC,CAAC,mBAAmB,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;QAClD,OAAO,EAAE,KAAK,EAAG,MAAiC,CAAC,WAAW,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACvG,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CACtB,QAA4B,EAC5B,MAA0B,EAC1B,YAA+B;IAE/B,MAAM,KAAK,GAAG,qBAAqB,QAAQ,CAAC,GAAG,EAAE,CAAC;IAClD,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,cAAc,CAAC;QAClF,IAAI,QAAQ,CAAC,GAAG,KAAK,aAAa,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACtE,OAAO,OAAO,CAAC,KAAK,EAAE,aAAa,EAAE,iCAAiC,EAAE,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAClF,OAAO,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,gCAAgC,EAAE,YAAY,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,WAAW,CAAC;QACrH,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,EAAE,YAAY,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,QAAQ,KAAK,gBAAgB,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACzH,OAAO,OAAO,CAAC,KAAK,EAAE,aAAa,EAAE,iCAAiC,EAAE,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC/C,OAAO,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,gCAAgC,EAAE,YAAY,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC;IAC9D,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,EAAE,YAAY,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,MAAM,CAAC,MAA0B,EAAE,MAA0B;IACpE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;IAC9B,MAAM,QAAQ,GAAG,GAAG,MAAM,SAAS,CAAC;IACpC,MAAM,QAAQ,GAAG,GAAG,MAAM,SAAS,CAAC;IACpC,MAAM,SAAS,GAAG,GAAG,MAAM,UAAU,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,WAAW,GAAG;QAClB,IAAI,CAAC,2BAA2B,EAAE,MAAM,CAAC,WAAW,CAAC;QACrD,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,WAAW,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;KAC5F,CAAC;IACF,MAAM,WAAW,GAAG;QAClB,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,6BAA6B,EAAE,YAAY,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACnG,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC,WAAW,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,aAAa,EACvE,qBAAqB,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;KACrF,CAAC;IACF,MAAM,cAAc,GAAwB,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IACjG,MAAM,YAAY,GAA8B;QAC9C,WAAW,CAAC,QAAQ,EAAE,cAAc,EAAE,mBAAmB,EAAE,WAAW,CAAC;QACvE,WAAW,CAAC,QAAQ,EAAE,cAAc,EAAE,mBAAmB,EAAE,WAAW,CAAC;KACxE,CAAC;IACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE;YAC5E,IAAI,CAAC,uBAAuB,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YACxD,IAAI,CAAC,0BAA0B,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;SAChE,CAAC,CAAC,CAAC;IACN,CAAC;IACD,MAAM,QAAQ,GAA0B;QACtC,OAAO,CAAC,GAAG,MAAM,iBAAiB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC9I,OAAO,CAAC,GAAG,MAAM,qBAAqB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC,CAAC;QACxI,OAAO,CAAC,GAAG,MAAM,kBAAkB,EAAE,MAAM,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EACvI,MAAM,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,6BAA6B,EAChI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;IAEF,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5G,QAAQ,CAAC,IAAI,CAAC,OAAO,CACnB,gBAAgB,EAChB,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,EAC5F,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gCAAgC,EACvH,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACrB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAChD,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC;QACtD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,eAAe,EAAE,8BAA8B,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxI,CAAC;aAAM,IAAI,cAAc,KAAK,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7F,CAAC;aAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,eAAe,EAAE,iCAAiC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACrH,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC7C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC;SACjG,CAAC;QACF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAA2B;IACzE,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC/B,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACpD,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QACzE,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,6BAA6B,CAAC,CAAC;IACxF,MAAM,mBAAmB,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxD,OAAO,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3D,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,6BAA6B,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE;QAC1B,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QACtJ,MAAM,EAAE,MAAM;QACd,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB;QAC9C,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB;QAC9C,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB;QAC/C,WAAW;QACX,WAAW,EAAE,MAAM,CAAC,EAAE;QACtB,mBAAmB;KACpB,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAA0B;IACvE,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5H,MAAM,OAAO,GAAG,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC;IACvC,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS;QAClD,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QACnD,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;YACtE,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;YAC1E,KAAK,CAAC,KAAK,KAAK,6BAA6B,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,KAAK,CAAC,CAAC;IAClD,MAAM,mBAAmB,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,6BAA6B,CAAC,CAAC;IAC/F,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE;QAC1B,OAAO,EAAE,QAAQ;QACjB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAC3I,MAAM,EAAE,MAAM,CAAC,QAAQ;QACvB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB;QAC9C,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB;QAC9C,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB;QAC/C,WAAW;QACX,WAAW,EAAE,MAAM,CAAC,EAAE;QACtB,mBAAmB;KACpB,CAAC,CAAC;AACL,CAAC"}

package/docs/cli-v0.1.md

@@ -0,0 +1,237 @@
+# Vera Anchor Verifier CLI (v0.1)
+
+The `vera-anchor` executable is installed with `@veraanchor/verifier`.
+
+After installing the package, run commands with `npx vera-anchor`. Contributors working from a source checkout may build the package with `npm run build` and invoke `node dist/cli.js` directly.
+
+Dataset verification defaults to **offline**. Public verification is always explicit. Ingest and SAGE execution support both offline and public workflows, while independent SAGE HCS standards verification is a separate networked workflow.
+
+## Commands
+
+```text
+npx vera-anchor verify dataset --bundle BUNDLE.json --sources SOURCES.json --source-root DIRECTORY --intent INTENT.json --policy POLICY.json [--receipt RECEIPT.json] [--mode offline] [--report-out REPORT.json]
+
+npx vera-anchor verify dataset --mode public --explorer-url https://explorer.veraanchor.com --bundle BUNDLE.json --sources SOURCES.json --source-root DIRECTORY --intent INTENT.json --policy PUBLIC_POLICY.json [--receipt RECEIPT.json] [--mirror-url https://mainnet-public.mirrornode.hedera.com/api/v1] [--report-out REPORT.json]
+
+npx vera-anchor verify ingest --bundle BUNDLE.json --material MATERIAL.json --intent INTENT.json --policy POLICY.json [--receipt RECEIPT.json] [--source-root DIRECTORY] [--mode offline] [--report-out REPORT.json]
+
+npx vera-anchor verify ingest --mode public --explorer-url https://explorer.veraanchor.com --anchor-request-id CORE_ANCHOR_UUID --bundle BUNDLE.json --material MATERIAL.json --intent INTENT.json --policy PUBLIC_POLICY.json [--receipt RECEIPT.json] [--source-root DIRECTORY] [--mirror-url https://mainnet-public.mirrornode.hedera.com/api/v1] [--report-out REPORT.json]
+
+npx vera-anchor verify execution --evidence EVIDENCE.json --intent INTENT.json --policy POLICY.json [--verification-material MATERIAL.json] [--mode offline] [--report-out REPORT.json]
+
+npx vera-anchor verify execution --mode public --explorer-url https://explorer.veraanchor.com --evidence EVIDENCE.json --intent INTENT.json --policy PUBLIC_POLICY.json [--verification-material MATERIAL.json] [--mirror-url https://mainnet-public.mirrornode.hedera.com/api/v1] [--report-out REPORT.json]
+
+npx vera-anchor verify standards --evidence SAGE_EVIDENCE.json --intent INTENT.json --policy STANDARDS_POLICY.json [--verification-material MATERIAL.json] [--mirror-url https://mainnet-public.mirrornode.hedera.com/api/v1] [--report-out REPORT.json]
+
+npx vera-anchor report validate --report SAVED_REPORT.json
+
+npx vera-anchor policy assess --report SAVED_REPORT.json --policy POLICY.json
+```
+
+## Verification intent and policy
+
+`INTENT.json` contains caller-controlled verification intent. Subject identifiers, network selection and expected commitments must come from the relying party's trusted context rather than being copied from the evidence being verified.
+
+`POLICY.json` uses the `va.verification-policy.v1` contract. Policy requirements determine which checks and assurance are required for an `allow`, `review` or `deny` decision.
+
+An untrusted receipt, bundle, execution record or standards projection cannot define its own sufficient acceptance threshold.
+
+## Portable reports
+
+All four `verify` commands accept `--report-out REPORT.json`.
+
+The output file contains only the native `va.portable-verification-report.v1` report. The CLI still writes its normal result envelope to stdout and preserves the policy exit code.
+
+The destination must be a new file in an existing writable directory. Report export uses a temporary sibling file and exclusive final creation so an existing output is not overwritten. Protect exported reports according to the sensitivity of their metadata.
+
+`report validate` checks report structure and internal digests. It does **not** authenticate the report or recompute the original evidence.
+
+`policy assess` treats a saved report as unauthenticated and therefore does not promote it into a fresh SDK-authorized `allow`. When a relying party needs a decision over the underlying evidence, rerun the corresponding verification workflow with independently supplied intent and policy.
+
+## Dataset verification
+
+### Offline Dataset verification
+
+Offline Dataset verification recomputes supported source, bundle and receipt relationships without resolver network requests.
+
+The Dataset source manifest supplied with `--sources` contains producer-relative paths. Those paths must correspond to the paths committed by the Dataset bundle; they are not inferred from local filesystem names.
+
+Example policy:
+
+```json
+{
+  "schema_version": "va.verification-policy.v1",
+  "subject": { "kind": "dataset", "id": "07be0cf7-4cab-40ca-aa70-87840df4d3e7.example.verification.demo.v1" },
+  "report_kind": "verification",
+  "required_checks": [
+    "dataset.source_binding",
+    "dataset.bundle_consistency"
+  ],
+  "on_unresolved": "review"
+}
+```
+
+### Public Dataset verification
+
+Public Dataset verification requires an independently selected Hedera network in both intent and policy. The policy must use `report_kind: "public_triangulation"`.
+
+Example:
+
+```json
+{
+  "schema_version": "va.verification-policy.v1",
+  "subject": {
+    "kind": "dataset",
+    "id": "07be0cf7-4cab-40ca-aa70-87840df4d3e7.example.verification.demo.v1",
+    "hedera_network": "mainnet"
+  },
+  "report_kind": "public_triangulation",
+  "required_checks": [
+    "dataset.source_binding",
+    "dataset.bundle_consistency",
+    "triangulation.public_record_hedera.message_sha3_512"
+  ],
+  "required_assurance": ["mirror_corroboration"],
+  "on_unresolved": "review"
+}
+```
+
+The public workflow recomputes local evidence, resolves the selected Vera Anchor Explorer publication record and independently queries Hedera Mirror for supported ledger observations.
+
+A consistent ciphertext digest is not proof of independently authenticated decrypted plaintext, Hedera consensus signatures or publisher ownership.
+
+## Ingest verification
+
+`verify ingest` accepts one bounded `--material MATERIAL.json` descriptor. The descriptor represents original material supplied for recomputation, not an authenticated claim about its fingerprint.
+
+Supported forms include:
+
+```json
+{"kind":"json","value":{"measurement":42}}
+```
+
+```json
+{"kind":"text","text":"sample text","media_type":"text/plain"}
+```
+
+```json
+{"kind":"file","path_rel":"measurement.csv"}
+```
+
+```json
+{"kind":"file_set","paths":["sample.csv","subdir/notes.txt"]}
+```
+
+For `file` and `file_set`, provide `--source-root DIRECTORY`. Paths must remain under the selected root and may not traverse symlinks.
+
+Public Ingest verification additionally requires an independently selected `--anchor-request-id` for the Core Merkle anchor request. This identifier is distinct from the ingest object key, a Dataset identifier and tenant-side Hash Factory anchors.
+
+Example public policy:
+
+```json
+{
+  "schema_version": "va.verification-policy.v1",
+  "subject": {
+    "kind": "ingest",
+    "id": "hf.first-ingest.demo",
+    "hedera_network": "mainnet"
+  },
+  "report_kind": "public_triangulation",
+  "required_checks": [
+    "ingest.source_binding",
+    "ingest.bundle_consistency",
+    "triangulation.public_record_hedera.message_sha3_512"
+  ],
+  "required_assurance": ["mirror_corroboration"],
+  "on_unresolved": "review"
+}
+```
+
+## SAGE execution verification
+
+Offline execution verification uses `subject.kind: "execution"`, the exact job UUID and `report_kind: "execution"`.
+
+The policy's `execution_scope` supplies the independently expected profile, program and optional exact result UUID. The verifier does not silently select a latest result.
+
+Example public execution policy:
+
+```json
+{
+  "schema_version": "va.verification-policy.v1",
+  "subject": {
+    "kind": "execution",
+    "id": "4e4f624d-25b6-577f-93c6-075292e722d6",
+    "hedera_network": "mainnet"
+  },
+  "report_kind": "execution_triangulation",
+  "required_checks": ["binding.digest_recomputed"],
+  "required_assurance": ["mirror_corroboration"],
+  "execution_scope": {
+    "profile": "sage-standards-v1",
+    "expected_program": "sage",
+    "requested_result_id": null
+  },
+  "on_unresolved": "review"
+}
+```
+
+Public execution triangulation covers its supported Explorer/Hedera relationships. It does not implicitly complete independent HCS standards verification.
+
+## Independent SAGE HCS standards verification
+
+`verify standards` is networked and uses Hedera Mirror only. It does not use Explorer and does not accept `--mode` or `--explorer-url`.
+
+The workflow resolves supported exact historical HCS references for the independently selected network. v0.1 supports HCS-1, HCS-2, HCS-11, HCS-13, HCS-14 and HCS-26 verification through the SDK's pinned contracts.
+
+Example policy:
+
+```json
+{
+  "schema_version": "va.verification-policy.v1",
+  "subject": {
+    "kind": "execution",
+    "id": "4e4f624d-25b6-577f-93c6-075292e722d6",
+    "hedera_network": "mainnet"
+  },
+  "report_kind": "independent_standards",
+  "required_checks": [
+    "binding.digest_recomputed",
+    "standards.references_resolved"
+  ],
+  "required_assurance": ["mirror_corroboration"],
+  "execution_scope": {
+    "profile": "sage-standards-v1",
+    "expected_program": "sage",
+    "requested_result_id": null
+  },
+  "on_unresolved": "review"
+}
+```
+
+HCS-26 resolution verifies the selected historical discovery/version path, canonical skill manifest and integrity of manifest-declared HCS-1 files within the SDK's resource bounds.
+
+Standards resolution does not authenticate Hedera consensus signatures, DID-controller ownership, historical account ownership or publisher-key control, and it does not prove that referenced software executed.
+
+HCS-1 Zstandard decoding uses Node's built-in `zstdDecompressSync`. Use Node 24 or Node 22.15+ for the full standards workflow. Older runtimes are outside the v0.1 supported engine range.
+
+## Resolver configuration
+
+`--explorer-url` is required only for public Explorer workflows. `--mirror-url` is optional; when omitted, the SDK uses its network-specific Hedera Mirror default.
+
+Resolver origins are caller-controlled configuration and are never taken from evidence or publication contents. Supported resolvers reject redirects, bound response sizes and timeouts, and do not silently probe another Hedera network.
+
+HTTPS is required except for HTTP loopback development endpoints.
+
+## CLI result and exit codes
+
+The CLI writes one JSON object to stdout using `schema_version: "va.verifier-cli-result.v1"`. Successful command execution returns either `{command,result}` or `{error:{code}}` according to the CLI contract. Raw source bytes and credentials are not included in the result envelope.
+
+Exit codes:
+
+- `0` — `allow`, or a valid saved report for `report validate`.
+- `1` — `deny`, or an invalid saved report.
+- `2` — `review`.
+- `64` — malformed command or input.
+- `70` — operational failure.
+
+No CLI mode asserts Hedera consensus-signature authentication, DID-controller ownership or independent cryptographic binding of Explorer-assisted decrypted publication plaintext to its ciphertext.

package/docs/conformance.md

@@ -0,0 +1,38 @@
+# Conformance
+
+The verifier is qualified against deterministic fixtures and live public observations. Conformance exists to demonstrate that the SDK reproduces supported Vera Anchor commitment contracts and preserves the same verification semantics across offline and networked workflows.
+
+## Current v0.1 coverage
+
+Release qualification includes:
+
+- Dataset offline recomputation and mainnet public triangulation;
+- Ingest offline recomputation and mainnet public triangulation;
+- SAGE execution verification using pinned mainnet evidence;
+- independent HCS standards resolution for supported HCS-1, HCS-2, HCS-11, HCS-13, HCS-14 and HCS-26 references;
+- HCS-26 manifest and declared-file integrity resolution;
+- explicit network-scope and no-fallback behavior;
+- Vera Anchor Explorer public-record resolution;
+- Hedera Mirror corroboration;
+- portable report validation and policy evaluation;
+- positive and adversarial cases for supported commitment and resolver boundaries.
+
+Live tests depend on external public services and therefore validate both the verifier and the continued availability of the pinned public evidence. A live service outage is not treated as a successful verification result.
+
+## Fixture requirements
+
+Conformance fixtures must identify the relevant evidence profile/version, source provenance, Hedera network, independently expected subject or digest, required checks and expected outcomes, and whether a test is deterministic/offline or depends on live public services.
+
+Fixtures must not contain production credentials, private tenant evidence or other confidential material. Missing fixture data must never be replaced with fabricated successful observations.
+
+## Reproducibility
+
+Offline fixtures are expected to produce deterministic results from the same bytes and caller-supplied intent. Networked conformance uses exact references and explicit network selection; it must not silently substitute a different Hedera network, latest registry state or unrelated public record.
+
+The repository test suite is part of release qualification:
+
+```sh
+npm test
+```
+
+A release also requires the package build and external-consumer checks described in the repository release process.

package/docs/threat-model.md

@@ -0,0 +1,37 @@
+# Threat model
+
+The verifier treats supplied bytes, JSON documents, source paths, evidence references and network responses as hostile input. Its purpose is to establish bounded verification claims without allowing untrusted evidence to define the relying party's trust policy.
+
+## Security boundaries
+
+| Threat | v0.1 boundary |
+| --- | --- |
+| Replayed evidence bound to the wrong subject | Verification intent is independently supplied and subject/commitment mismatches fail. |
+| Cross-network substitution | Hedera network selection is explicit and checked; resolvers do not silently fall back to another network. |
+| Fabricated corroboration | Observations retain source/resolver identity and triangulation compares independently acquired facts rather than accepting producer summaries as proof. |
+| Resolver redirection or arbitrary evidence URLs | Public resolver origins are caller-controlled configuration. Supported resolvers reject redirects and do not obtain resolver authority from evidence. |
+| Oversized or adversarial inputs | Parsers, JSON structures, source sets, proof paths, HCS chunks, decompression and network responses are bounded at implementation-specific limits. |
+| Stale or substituted registry state | Standards workflows use exact historical locators where required and do not silently select a latest entry. |
+| Ledger-assurance overclaim | Hedera Mirror observations are reported as corroboration, not consensus-signature authentication. |
+| Saved-report overclaim | Portable report validation checks structure and digests; a saved report does not authenticate itself or independently authorize `allow`. |
+| Local path traversal or symlink substitution | CLI source workflows validate relative paths and constrain reads to the selected source root. |
+| Leakage of private evidence | Offline workflows do not perform network requests; public network access is explicit. Reports and CLI output exclude raw source bytes and credentials. |
+| Dependency compromise | The package has no runtime dependencies; development and release installs are lockfile-driven and validated in CI/release qualification. |
+
+## Trust assumptions
+
+The relying party is responsible for independently selecting verification intent, expected subject identifiers, Hedera network, resolver origins and acceptance policy. Values copied from untrusted evidence do not become trustworthy merely because they are supplied to the verifier as expectations.
+
+Vera Anchor Explorer and Hedera Mirror are distinct observation sources. A successful Explorer or Mirror lookup establishes only the claim represented by that resolver's documented result. Mirror REST data is not an authenticated Hedera consensus proof.
+
+## Out of scope for v0.1
+
+The verifier does not establish:
+
+- factual truth or quality of the underlying content;
+- DID-controller ownership or publisher control solely from a DID/UAID declaration;
+- authenticated Hedera consensus signatures from Mirror REST responses;
+- historical account ownership beyond the exact evidence the supported standards expose;
+- independent cryptographic binding of Explorer-assisted decrypted plaintext to publication ciphertext.
+
+These boundaries are intentional. Unsupported or unavailable assurance must remain explicit rather than being inferred from successful integrity checks.