LiveHow do we verify records in our own pipeline?
Offline verifier
Dependency-free Ed25519 and chain-hash verification with stable exit codes.
Local verification
terminal
node verify-dossier.mjs presence-record.json presence-jwks.jsontest $? -eq 0 && echo 'record verified'Pipeline gate
.github/workflows/verify-record.yml
- name: Verify Presence Record run: | node tools/verify-dossier.mjs \ artifacts/presence-record.json \ trust/presence-jwks.jsonAudit locally
- 01
The verifier uses only node:crypto, recomputes the record chain hash, and verifies the Ed25519 signature as separate checks.
- 02
Exit codes are 0 verified, 1 not verified, and 2 usage or I/O failure. Supplying JWKS from disk keeps the workflow fully offline.
Verify the implementation
Download the verifier.
verify-dossier.mjs →Check the published checksum.
SHA-256 →
One next step
Continue with the executable path.