sia-verifier 1.3.0__tar.gz

sia_verifier-1.3.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 SIA Sentinel contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

sia_verifier-1.3.0/PKG-INFO

@@ -0,0 +1,126 @@
+Metadata-Version: 2.4
+Name: sia-verifier
+Version: 1.3.0
+Summary: Independent verifier for sia-attestation/1 Proof-of-Savings attestations — no trust in the auditor required
+Author: SIA Sentinel contributors
+License: MIT License
+        
+        Copyright (c) 2026 SIA Sentinel contributors
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+        
+Project-URL: Homepage, https://github.com/sia-sentinel/sia-sentinel
+Keywords: ai,finops,attestation,ed25519,verification
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: Security :: Cryptography
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: cryptography>=41.0
+Dynamic: license-file
+
+# sia-verifier
+
+**Independent verifier for `sia-attestation/1` Proof-of-Savings attestations.**
+
+This package lets *anyone* verify an AI cost-savings attestation **without
+trusting the auditor**. It needs only the attestation document and the
+issuer's public key (carried inside the document). No network calls, no
+Sentinel server, no SDK.
+
+## Why this exists
+
+A Proof-of-Savings attestation claims: *"this AI workload was audited, the
+savings are real, and here is cryptographic proof."* The whole point of the
+claim is that you should not have to take the auditor's word for it. This
+verifier is the reference implementation of that promise:
+
+- **Ed25519 receipt signature** — the receipt (including `receipt_id` and the
+  reproducibility manifest) is signed; any tampering breaks the signature.
+- **Claim consistency** — the public claim must match the signed
+  `safety_approved` field; a forged claim fails verification.
+- **TrustChain hash chain** (optional) — given a ledger export, every entry is
+  recomputed; removal, insertion, reorder or content tampering breaks it.
+- **Checkpoints** (optional) — signed commitments pinning the chain head.
+
+## Install
+
+```bash
+pip install sia-verifier
+```
+
+Single dependency: `cryptography`. Python 3.9+.
+
+## CLI
+
+```bash
+# Verify an attestation document (the JSON served at GET /v1/attestations/{id})
+sia-verifier attestation.json
+
+# Also verify the hash chain from a ledger export
+sia-verifier attestation.json --chain registry.jsonl
+
+# Also verify a checkpoint signature
+sia-verifier attestation.json --checkpoint checkpoint.json
+
+# Machine-readable verdict
+sia-verifier attestation.json --json
+```
+
+Exit code `0` = valid, `1` = invalid, `2` = input error — safe to wire into CI.
+
+## Python API
+
+```python
+import json
+from sia_verifier import verify_attestation, verify_chain
+
+attestation = json.load(open("attestation.json"))
+verdict = verify_attestation(attestation)
+
+assert verdict.valid, verdict.reasons
+assert verdict.receipt_signature_valid
+assert verdict.claim_consistent
+```
+
+## What is NOT verified (by design)
+
+- The `verification.*` fields inside the attestation are the *server's* live
+  opinion and are deliberately ignored — they are not part of the signed
+  commitment.
+- The issuer's public key is taken from the document itself. For a
+  higher-assurance check, pin the issuer's key out-of-band (e.g. from the
+  issuer's published key registry) and compare it to `issuer.public_key`
+  before trusting the verdict.
+- This verifier checks cryptographic integrity, not whether the audit
+  methodology was sound. Methodology is documented in the attestation's
+  reproducibility manifest.
+
+## Specification
+
+The full format is defined by the `sia-attestation/1` specification
+(commitment construction, hash chain, checkpoints). See the SIA Sentinel
+repository, `docs/attestation-spec.md`.
+
+## License
+
+MIT

sia_verifier-1.3.0/README.md

@@ -0,0 +1,86 @@
+# sia-verifier
+
+**Independent verifier for `sia-attestation/1` Proof-of-Savings attestations.**
+
+This package lets *anyone* verify an AI cost-savings attestation **without
+trusting the auditor**. It needs only the attestation document and the
+issuer's public key (carried inside the document). No network calls, no
+Sentinel server, no SDK.
+
+## Why this exists
+
+A Proof-of-Savings attestation claims: *"this AI workload was audited, the
+savings are real, and here is cryptographic proof."* The whole point of the
+claim is that you should not have to take the auditor's word for it. This
+verifier is the reference implementation of that promise:
+
+- **Ed25519 receipt signature** — the receipt (including `receipt_id` and the
+  reproducibility manifest) is signed; any tampering breaks the signature.
+- **Claim consistency** — the public claim must match the signed
+  `safety_approved` field; a forged claim fails verification.
+- **TrustChain hash chain** (optional) — given a ledger export, every entry is
+  recomputed; removal, insertion, reorder or content tampering breaks it.
+- **Checkpoints** (optional) — signed commitments pinning the chain head.
+
+## Install
+
+```bash
+pip install sia-verifier
+```
+
+Single dependency: `cryptography`. Python 3.9+.
+
+## CLI
+
+```bash
+# Verify an attestation document (the JSON served at GET /v1/attestations/{id})
+sia-verifier attestation.json
+
+# Also verify the hash chain from a ledger export
+sia-verifier attestation.json --chain registry.jsonl
+
+# Also verify a checkpoint signature
+sia-verifier attestation.json --checkpoint checkpoint.json
+
+# Machine-readable verdict
+sia-verifier attestation.json --json
+```
+
+Exit code `0` = valid, `1` = invalid, `2` = input error — safe to wire into CI.
+
+## Python API
+
+```python
+import json
+from sia_verifier import verify_attestation, verify_chain
+
+attestation = json.load(open("attestation.json"))
+verdict = verify_attestation(attestation)
+
+assert verdict.valid, verdict.reasons
+assert verdict.receipt_signature_valid
+assert verdict.claim_consistent
+```
+
+## What is NOT verified (by design)
+
+- The `verification.*` fields inside the attestation are the *server's* live
+  opinion and are deliberately ignored — they are not part of the signed
+  commitment.
+- The issuer's public key is taken from the document itself. For a
+  higher-assurance check, pin the issuer's key out-of-band (e.g. from the
+  issuer's published key registry) and compare it to `issuer.public_key`
+  before trusting the verdict.
+- This verifier checks cryptographic integrity, not whether the audit
+  methodology was sound. Methodology is documented in the attestation's
+  reproducibility manifest.
+
+## Specification
+
+The full format is defined by the `sia-attestation/1` specification
+(commitment construction, hash chain, checkpoints). See the SIA Sentinel
+repository, `docs/attestation-spec.md`.
+
+## License
+
+MIT

sia_verifier-1.3.0/pyproject.toml

@@ -0,0 +1,37 @@
+[build-system]
+requires = ["setuptools>=68"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "sia-verifier"
+version = "1.3.0"
+description = "Independent verifier for sia-attestation/1 Proof-of-Savings attestations — no trust in the auditor required"
+readme = "README.md"
+requires-python = ">=3.9"
+license = { file = "LICENSE" }
+authors = [{ name = "SIA Sentinel contributors" }]
+keywords = ["ai", "finops", "attestation", "ed25519", "verification"]
+classifiers = [
+    "Development Status :: 5 - Production/Stable",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python :: 3",
+    "Topic :: Security :: Cryptography",
+]
+# Единственная зависимость — криптография. Никаких сетевых вызовов,
+# никакого SDK Sentinel: верификатор должен работать у любой третьей
+# стороны, которая не доверяет аудитору. (rederive делает один
+# опциональный живой запрос к публичному логу Rekor — по флагу.)
+dependencies = ["cryptography>=41.0"]
+
+[project.scripts]
+sia-verifier = "sia_verifier.__main__:main"
+sia-rederive = "sia_verifier.rederive:main"
+sia-holdout = "sia_verifier.holdout:main"
+sia-replay = "sia_verifier.replay:main"
+
+[project.urls]
+Homepage = "https://github.com/sia-sentinel/sia-sentinel"
+
+[tool.setuptools.packages.find]
+include = ["sia_verifier*"]

sia_verifier-1.3.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

sia_verifier-1.3.0/sia_verifier/__init__.py

@@ -0,0 +1,77 @@
+"""sia-verifier — независимый верификатор аттестаций Proof-of-Savings.
+
+Минимальный пакет (только `cryptography` + stdlib), который проверяет
+аттестации стандарта ``sia-attestation/1`` **без доверия к аудитору**:
+нужен только сам документ аттестации и (опционально) выгрузка журнала
+TrustChain. Никаких сетевых вызовов, никакого SDK Sentinel.
+
+Что проверяется:
+
+1. **Подпись квитанции** — Ed25519 (RFC 8032) над каноническим JSON
+   коммитмента, восстановленного из полей квитанции (включая
+   ``receipt_id``). Публичный ключ берётся из ``issuer.public_key``
+   аттестации и принимается только в виде base64 raw 32 байт.
+2. **Согласованность заявления** — ``receipt.safety_approved`` должен
+   совпадать с ``claim.savings_verified``: подпись покрывает именно
+   ``safety_approved``, поэтому расхождение означает подделку заявления.
+3. **Хеш-цепочка TrustChain** (опционально, по выгрузке журнала) —
+   каждая запись пересчитывается из ``seq``, ``prev_hash`` и содержимого;
+   удаление, вставка, перестановка или подмена записи ломают цепочку.
+4. **Чекпоинты** — подписанные коммитменты на голову цепочки (v1) и на
+   голову цепочки + Merkle tree head (v2).
+5. **Merkle-доказательства** (RFC 6962) — ``verify_inclusion`` проверяет
+   включение записи в tree head, ``verify_consistency`` — что дерево
+   размера N является продолжением дерева размера M.
+
+CLI (v1.3.0)::
+
+    sia-verifier attestation.json [--chain registry.jsonl] [--checkpoint cp.json]
+    sia-rederive  [--artifacts DIR] [--flow F] [--chain C] [--no-rekor]
+    sia-replay    --flow F --record report1.json --replay report2.json
+    sia-holdout   make|reveal|verify ...
+
+Первая команда проверяет подпись/цепь/чекпоинт; вторая перевыводит сам
+вердикт записи (формулы считаются локально, входы пришиты к подписи через
+receipt.code_hash); третья исполняет задекларированный допуск
+replay_tolerance — сравнение записи с независимым повторным прогоном
+(Б2: односторонний допуск «к заявлению»); четвёртая — инструмент
+внешнего аудитора holdout (п.8).
+Все три доступны и как ``python -m sia_verifier.<module>``.
+
+Программа и API возвращают вердикт; ненулевой код выхода при
+невалидной аттестации позволяет встраивать проверку в CI.
+"""
+from __future__ import annotations
+
+from .core import (
+    ATTESTATION_SPEC,
+    AttestationVerdict,
+    ChainVerdict,
+    leaf_hash,
+    resolve_receipt_key,
+    verify_attestation,
+    verify_chain,
+    verify_checkpoint,
+    verify_consistency,
+    verify_inclusion,
+    verify_key_declarations,
+    verify_receipt,
+)
+
+__version__ = "1.3.0"
+
+__all__ = [
+    "ATTESTATION_SPEC",
+    "AttestationVerdict",
+    "ChainVerdict",
+    "leaf_hash",
+    "resolve_receipt_key",
+    "verify_attestation",
+    "verify_chain",
+    "verify_checkpoint",
+    "verify_consistency",
+    "verify_inclusion",
+    "verify_key_declarations",
+    "verify_receipt",
+    "__version__",
+]

sia_verifier-1.3.0/sia_verifier/__main__.py

@@ -0,0 +1,136 @@
+"""CLI независимого верификатора аттестаций Proof-of-Savings.
+
+Примеры::
+
+    # Проверить аттестацию из файла (документ GET /v1/attestations/{id})
+    python -m sia_verifier attestation.json
+
+    # Проверить аттестацию + хеш-цепочку журнала
+    python -m sia_verifier attestation.json --chain registry.jsonl
+
+    # Проверить подпись чекпоинта
+    python -m sia_verifier attestation.json --checkpoint checkpoint.json
+
+Код выхода: 0 — аттестация валидна, 1 — невалидна, 2 — ошибка ввода.
+"""
+from __future__ import annotations
+
+import argparse
+import json
+import sys
+from pathlib import Path
+from typing import Any
+
+from .core import verify_attestation, verify_chain, verify_checkpoint
+
+
+def _load_json(path: Path) -> Any:
+    return json.loads(path.read_text(encoding="utf-8"))
+
+
+def _load_jsonl(path: Path) -> list[dict[str, Any]]:
+    entries = []
+    for line in path.read_text(encoding="utf-8").splitlines():
+        line = line.strip()
+        if line:
+            entries.append(json.loads(line))
+    return entries
+
+
+def main(argv: list[str] | None = None) -> int:
+    parser = argparse.ArgumentParser(
+        prog="sia-verifier",
+        description="Independent verifier for sia-attestation/1 Proof-of-Savings attestations.",
+    )
+    parser.add_argument(
+        "attestation",
+        type=Path,
+        help="Path to the attestation document JSON (GET /v1/attestations/{id})",
+    )
+    parser.add_argument(
+        "--chain",
+        type=Path,
+        default=None,
+        help="Optional TrustChain ledger export (registry.jsonl) to verify the hash chain",
+    )
+    parser.add_argument(
+        "--checkpoint",
+        type=Path,
+        default=None,
+        help="Optional checkpoint JSON to verify against the issuer public key",
+    )
+    parser.add_argument(
+        "--json",
+        action="store_true",
+        help="Print the verdict as JSON instead of human-readable text",
+    )
+
+    args = parser.parse_args(argv)
+
+    try:
+        attestation = _load_json(args.attestation)
+    except (OSError, json.JSONDecodeError) as exc:
+        print(f"error: cannot read attestation file: {exc}", file=sys.stderr)
+        return 2
+
+    verdict = verify_attestation(attestation)
+    result: dict[str, Any] = {"attestation": verdict.to_dict()}
+
+    issuer_key = (attestation.get("issuer") or {}).get("public_key", "")
+    attestation_id = attestation.get("attestation_id")
+
+    if args.chain is not None:
+        try:
+            entries = _load_jsonl(args.chain)
+        except (OSError, json.JSONDecodeError) as exc:
+            print(f"error: cannot read chain file: {exc}", file=sys.stderr)
+            return 2
+
+        chain_verdict = verify_chain(entries, attestation_id=attestation_id)
+        result["chain"] = chain_verdict.to_dict()
+
+    if args.checkpoint is not None:
+        try:
+            checkpoint = _load_json(args.checkpoint)
+        except (OSError, json.JSONDecodeError) as exc:
+            print(f"error: cannot read checkpoint file: {exc}", file=sys.stderr)
+            return 2
+
+        result["checkpoint_valid"] = verify_checkpoint(checkpoint, issuer_key)
+
+    overall = verdict.valid
+    if "chain" in result:
+        overall = overall and result["chain"]["valid"]
+        if result["chain"].get("contains_attestation") is False:
+            overall = False
+            result["chain"]["reason"] = (
+                result["chain"].get("reason")
+                or "attestation_id not found in the provided chain"
+            )
+    if "checkpoint_valid" in result:
+        overall = overall and result["checkpoint_valid"]
+
+    if args.json:
+        result["valid"] = overall
+        print(json.dumps(result, indent=2))
+    else:
+        print(f"spec:                 {attestation.get('spec')}")
+        print(f"attestation_id:       {attestation_id}")
+        print(f"receipt signature:    {'VALID' if verdict.receipt_signature_valid else 'INVALID'}")
+        print(f"claim consistent:     {'yes' if verdict.claim_consistent else 'NO'}")
+        if "chain" in result:
+            chain = result["chain"]
+            print(f"chain:                {'VALID' if chain['valid'] else 'INVALID'} ({chain['entries']} entries)")
+            if chain.get("contains_attestation") is False:
+                print("chain membership:     attestation NOT FOUND in chain")
+        if "checkpoint_valid" in result:
+            print(f"checkpoint signature: {'VALID' if result['checkpoint_valid'] else 'INVALID'}")
+        for reason in verdict.reasons:
+            print(f"  - {reason}")
+        print(f"VERDICT: {'VALID' if overall else 'INVALID'}")
+
+    return 0 if overall else 1
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())