Grant Stellmacher
RegistryAEF

Attested Execution Framework

Verify it yourself

This page runs the actual reference verifier, compiled for the browser, against example record run-0001: the same checks, the same outcome vocabulary, the same qualifications as the command line. Switch to the tampered copy and watch seal-integrity fail. Or hand it a record of your own; it never leaves the tab.

What you are trusting when you trust this page

  • Verifier: aef-reference-verifier v0.4.0, compiled from packages/aef/verify.ts. Bundle sha-256: df68ef1a1e0670cd8b010a77f3cb1b1c07cd00121309772ca114d114c69b149e
  • Suite version this verifier is covered by: sha-256:f851528b8d6e7e3acbaf8a711b9e20450ae38c0534136bd4f786265797ac07b9 (coverage)

A browser verifier inherits every concession in AEF 1100 and adds one of its own: you are trusting this page's JavaScript. That is a trust dependency in exactly the sense of AEF 1101 section 7, and it fails all three externality tests: the operator of this site can alter the bundle, can withdraw it, and you obtained it from the operator. The verification below is therefore the operator demonstrating its own verifier, not independent verification. To verify independently, clone the repository and run npm run aef:verify from a checkout you obtained through a channel you trust.

The artifacts this page fetches come from the same origin that published the record, so every live result honestly carries ARTIFACTS-OPERATOR-SUPPLIED. Checks that cannot run report themselves: a fatal check with missing material makes the outcome INCONCLUSIVE with the reason stated, never a silent skip. With this page's artifact set supplied, every check the command line runs, runs here; the build refuses to ship this bundle unless its outcome and qualification set are byte-identical to the pinned results for all three cases below.

The pinned results, as static content

Computed by the command-line verifier and published at run-0001. The live verifier below must agree with these or the page does not ship:

Pinned verification results for the three cases
SubjectOutcomeFirst failing checkQualifications
run-0001, as publishedPASS_WITH_QUALIFICATIONS12
the tampered copyFAILseal-integrity12
with the declaration withheldINCONCLUSIVEdeclaration-binding12

Live, in this tab

Live verification requires scripts. Without them, the pinned results above are the content of this page; with them, the reference verifier loads and runs here.