Expand description
Offline verification of air-gapped org provenance bundles. Offline verification of an air-gapped org provenance bundle.
The pure, zero-network core of the org/member provenance story: a
self-contained [AirGappedOrgBundle] (the org KEL, every delegated
member’s KEL, durable off-boarding records, pinned roots) verifies with
the network cable unplugged — every event’s SAID recomputed, every event’s
signature authenticated against the controlling key-state (RT-002),
duplicity flagged, and a member’s authority at a signing position
classified by KEL position, never wall-clock.
It lives in the verifier crate — the leaf dependency every surface shares
— so a CI gate, a third-party audit tool, or a browser (via the WASM
exports) reproduces the same verdict from evidence alone. The bundle
builder (which needs a live registry) stays in auths-sdk; that crate
re-exports these types so there is exactly one definition of the wire
contract.
Re-exports§
pub use bundle::AIR_GAPPED_ORG_BUNDLE_SCHEMA_VERSION;pub use bundle::AirGappedOrgBundle;pub use bundle::BundledKel;pub use error::OrgBundleError;pub use record::OffboardingRecord;pub use record::SignedOffboardingRecord;pub use record::find_revocation_event;pub use record::verify_offboarding_record;pub use verify::AuthorityAtSigning;pub use verify::OfflineVerifyReport;pub use verify::authenticate_bundled_kel;pub use verify::verify_org_bundle;pub use verify::verify_org_bundle_json;
Modules§
- bundle
- Air-gapped bundle wire types. Air-gapped org provenance bundle — a self-contained, URL-free artifact.
- error
- Typed failures for bundle and record verification. Typed failures verifying an air-gapped org bundle offline.
- record
- Durable, signed off-boarding records bound to on-KEL revocation seals. Off-boarding audit records — durable, signed, seal-bound evidence.
- verify
- The offline verification engine. Offline verification of an air-gapped org bundle — a pure, zero-network function of the bundle’s contents.