veritasacta-verify

离线 Ed25519 收据校验器，无需联网即可校验已签名的决策收据、agent 清单与审计包，采用 Apache-2.0 许可。

cursor.directory·↓ 0

1 SKILL

# Veritas Acta Verify — Offline Receipt Verification

## What This Does

Verifies Ed25519-signed receipts and artifacts without contacting any server.
The verifier checks the cryptographic signature over JCS-canonicalized JSON
(RFC 8785). If the record was modified after signing, verification fails.

## Quick Start

```bash
# Self-test: verify a built-in sample receipt
npx @veritasacta/verify@0.2.4 --self-test

# Verify a specific receipt file
npx @veritasacta/verify@0.2.4 receipt.json

# Verify with a specific issuer public key
npx @veritasacta/verify@0.2.4 receipt.json --key issuer-public.json

# Verify an audit bundle
npx @veritasacta/verify@0.2.4 bundle.json
```

## Exit Codes

| Code | Meaning |
|------|---------|
| 0 | All receipts verified — signatures valid |
| 1 | One or more signatures invalid |
| 2 | Malformed input |

## Links

- npm: https://npmjs.com/package/@veritasacta/verify
- Source: https://github.com/VeritasActa/Acta
- IETF Draft: https://datatracker.ietf.org/doc/draft-farley-acta-signed-receipts/