Skip to content

Fix evidence bundle signature verification - #16

Merged
Mopati123 merged 1 commit into
masterfrom
codex/evidence-bundle-signature-verification
May 7, 2026
Merged

Fix evidence bundle signature verification#16
Mopati123 merged 1 commit into
masterfrom
codex/evidence-bundle-signature-verification

Conversation

@Mopati123

Copy link
Copy Markdown
Owner

Summary

  • Align optional evidence bundle signing and verification on the same canonical payload.
  • Sign deterministic bundle identity data after bundle_id, timestamp, and merkle_root are known.
  • Preserve public bundle fields and to_dict() display truncation.
  • Add focused regression coverage for emit-then-verify success and tamper rejection.

Validation

  • python -m pytest tests/rootfile/test_evidence_bundle_signature.py -q -> 4 passed
  • python -m pytest tests/rootfile -q -> 115 passed
  • python -m pytest tests -q -> 208 passed, 9 warnings
  • python -c "from tachyonic_chain.audit_log import verify_execution_evidence_chain; print(verify_execution_evidence_chain('logs/execution_evidence.jsonl').valid)" -> True
  • git diff --cached --check -> passed

Safety

  • No broker execution or canary run in this pass.
  • Runtime logs/data, .env, .github drift, and runner drift were not included.
  • kluster was attempted after edits, but review is blocked because the trial has ended.

@Mopati123
Mopati123 marked this pull request as ready for review May 7, 2026 12:36
@Mopati123
Mopati123 merged commit c00fbaf into master May 7, 2026
@Mopati123
Mopati123 deleted the codex/evidence-bundle-signature-verification branch May 12, 2026 15:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants