aqta-verify-receipt 1.3.0 → 1.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +21 -4
- package/dist/index.d.ts +1 -1
- package/dist/index.js +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -8,12 +8,29 @@
|
|
|
8
8
|
[](https://pypi.org/project/aqta-verify-receipt/)
|
|
9
9
|
[](LICENSE)
|
|
10
10
|
|
|
11
|
-
|
|
11
|
+
**Check what an AI was allowed to do, without trusting the company that ran it.**
|
|
12
12
|
|
|
13
|
-
Seal signs the model
|
|
14
|
-
without contacting Aqta. No account. Exit code only if you want it quiet.
|
|
13
|
+
Seal signs each AI decision that passes through it, at the moment it happens: model calls and agent actions, refusals included. This package checks those signed records on your own machine. No account, no call to Aqta. Change one field and the check fails.
|
|
15
14
|
|
|
16
|
-
|
|
15
|
+
## Try it in 10 seconds
|
|
16
|
+
|
|
17
|
+
```bash
|
|
18
|
+
curl -sO https://app.aqta.ai/samples/sample-receipt.json
|
|
19
|
+
npx aqta-verify-receipt sample-receipt.json --key 9Y3Eiq6V8QjRDUM5nPqSwKIOPQaoEU4SbagfYFdvWa4
|
|
20
|
+
# ✓ valid ALLOWED 520a…853a94 pinned issuer key
|
|
21
|
+
```
|
|
22
|
+
|
|
23
|
+
Now change `"outcome"` in the file and run it again:
|
|
24
|
+
|
|
25
|
+
```text
|
|
26
|
+
✕ invalid signature check failed 520a…853a94
|
|
27
|
+
```
|
|
28
|
+
|
|
29
|
+
## Why it exists
|
|
30
|
+
|
|
31
|
+
- A log is kept by whoever runs the system. A signed record can be checked by anyone else, offline, against a published key.
|
|
32
|
+
- Two verifiers, written separately: this one and the Python (PyPI) one. They must return the same verdict on every published test vector.
|
|
33
|
+
- In use: [Authority Arena](https://arena.aqta.ai), an open evaluation of 21 AI models, checks all 1,529 of its signed records with this package.
|
|
17
34
|
|
|
18
35
|
## 30-second check
|
|
19
36
|
|
package/dist/index.d.ts
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* aqta-verify-receipt
|
|
3
3
|
*
|
|
4
|
-
*
|
|
4
|
+
* Offline verifier for Seal attestation receipts (ATTESTATION-v1).
|
|
5
5
|
* Verifies the Ed25519 signature on a receipt using only the published
|
|
6
6
|
* public key: no dependency on any third-party server.
|
|
7
7
|
*
|
package/dist/index.js
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
/**
|
|
3
3
|
* aqta-verify-receipt
|
|
4
4
|
*
|
|
5
|
-
*
|
|
5
|
+
* Offline verifier for Seal attestation receipts (ATTESTATION-v1).
|
|
6
6
|
* Verifies the Ed25519 signature on a receipt using only the published
|
|
7
7
|
* public key: no dependency on any third-party server.
|
|
8
8
|
*
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "aqta-verify-receipt",
|
|
3
|
-
"version": "1.3.
|
|
3
|
+
"version": "1.3.1",
|
|
4
4
|
"description": "Offline CLI and library for Seal records: ATTESTATION-v1 for what an AI decided, ACTION-v1 for what an agent was allowed to do, refusals included. Ed25519, checked against a published key with no account and no Aqta server.",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|