Verification and evidence
The verifier checks evidence offline. What can be established depends on evidence completeness, disclosure level and the actual verdict.
What the seven checks establish
| Check | What is checked |
|---|---|
| 1. Signature validity | Whether the signature matches the known key history |
| 2. Sequence continuity | Whether sequences are continuous within the evidence scope |
| 3. Hash-chain continuity | Whether receipt hash links are consistent |
| 4. Merkle inclusion | Whether the Merkle commitment includes the receipt |
| 5. RFC 3161 timestamp | Whether the RFC 3161 timestamp token is valid |
| 6. Cost recomputation | Whether disclosed pricing and variables reproduce the cost |
| 7. Retail itemization | Whether disclosed customer retail itemization is consistent |
Check 5 verifies the TSA timestamp. On-chain anchoring is checked separately under the anchoring specification; timestamp success does not mean the blockchain was checked.
Respect disclosure boundaries
Illustration only; no verification is executed here. Actual verdicts depend on the evidence bundle.
DISCLOSURE 01DISCLOSURE 02DISCLOSURE 03Public, supplier and customer views have different scopes. Checks may be skipped because data is not disclosed. Do not expose another party’s data to force a 7/7 result. Operator health endpoints are not seven-check verification reports.
Read verdicts and exit codes
| Verdict | Meaning |
|---|---|
| PASS | This check passed for the supplied evidence |
| FAIL | An inconsistency or verification failure was found |
| SKIPPED | The check could not complete due to disclosure or missing evidence |
Verification failures exit 1; input or configuration errors exit 2. Ordinary mode can exit 0 with no FAIL even if checks were skipped. Strict mode exits 3 when SKIPPED remains. Period sampling must not be described as full verification.
Know the limits
- Does not prove the identity of the upstream model; model names are input claims.
- Does not establish absolute metering accuracy or contractual price fairness; external reconciliation remains necessary.
- Does not prove every real event was captured or rule out missing exports.
- Does not claim TEE or model-authenticity verification as an existing feature.