continuity-receipt (Rust)

Second, independent implementation of the Continuity Receipt verifier for continuity-receipt/0.1-0.2 bundles. The Python implementation in ../continuity_receipt/ remains the reference; this crate exists for the two-independent-implementations bar, native embedding, and single-binary deployment.

It re-implements the pinned JCS subset (canon.rs), did:key Ed25519 verification (didkey.rs), and the full verification algorithm with the same error codes, verdict precedence, and JSON output shape as continuity_receipt.verify (verify.rs).

Install

cargo add continuity-receipt        # library
cargo install continuity-receipt    # both CLIs (verify + disclose)

The crate tracks continuity-receipt/0.1-0.2 bundles; the Python implementation in this repository remains the reference. Publication runbook: PUBLISH.md.

Run

cargo run --bin continuity-receipt-verify -- ../vectors/02_happy_full.json
cargo run --bin continuity-receipt-verify -- ../vectors/10b_anchor_missing.json --require-anchor

The binary prints the same JSON shape as the Python CLI (verdict, errors, provisional_reasons, insufficient_reasons, summary) and exits 0 iff the verdict is TRUSTED, else 1.

Selective disclosure

continuity-receipt-disclose mirrors continuity_receipt/disclose.py (redact / verify / reveal / check):

cargo run --bin continuity-receipt-disclose -- redact \
  --bundle ../vectors/02_happy_full.json \
  --path receipts[3].body.spec_ref \
  --out /tmp/redacted.json --map /tmp/map.json --gate-key /tmp/gate.key

cargo run --bin continuity-receipt-disclose -- verify \
  --bundle /tmp/redacted.json --map /tmp/map.json

cargo run --bin continuity-receipt-disclose -- reveal \
  --bundle /tmp/redacted.json --map /tmp/map.json \
  --path receipts[3].body.spec_ref --out /tmp/package.json

cargo run --bin continuity-receipt-disclose -- check \
  --salt <hex> --value '["quality-ok"]' --commit sha256:...

The gate-key file is the raw 32-byte Ed25519 seed. Redaction re-signs the modified receipt and every receipt after it, so the signer must be the chain's issuer; redacting a cross-checked field (for example spend_cap) fails closed to UNTRUSTED because a commitment cannot prove the claim.

Tests

cargo test

The vector runner reads ../vectors/manifest.json and checks all 20 vectors against their expected verdict and error code. Malformed-bundle smoke cases (empty object, non-object, missing receipts) are included so the verifier returns structured errors instead of panicking. tests/disclose.rs covers redaction, tail re-signing, refusal cases, and commitment recomputation against the frozen vectors. tests/fuzz_corpus.rs mutates every vector (deterministic seed) plus synthetic malformed shapes and byte truncations: every case must yield a structured verdict with coded errors and never panic. Set CR_FUZZ_CORPUS_DIR=<dir> to write the generated corpus to disk.

The Python↔Rust differentials run in CI after cargo build:

python3 tools/differential_vectors.py    # verdict + error-code parity
python3 tools/differential_disclose.py   # maps, signatures, cross-verification

Intentional, documented differences from Python

• Floats and canonicalization failures produce a structured malformed (or the relevant check's) error instead of a Python exception/traceback.
• Invalid JSON input to the CLI prints a structured malformed result and exits 1 instead of raising.
• Non-list anchors/revocations values and other deeply malformed shapes are failed closed with the corresponding structured error where Python would raise.
• disclose redact additionally accepts repeatable --salt <path>=<hex> for reproducible commitments; the Python CLI always randomizes salts.
• disclose verify does not accept --revocations until the Rust revocation-list loader lands; external lists remain Python-only.