diff --git a/public/evidence/aaif/authority-at-dispatch/2026-10-24-fetch-route/README.md b/public/evidence/aaif/authority-at-dispatch/2026-10-24-fetch-route/README.md index 8b94d7b..c90cbe3 100644 --- a/public/evidence/aaif/authority-at-dispatch/2026-10-24-fetch-route/README.md +++ b/public/evidence/aaif/authority-at-dispatch/2026-10-24-fetch-route/README.md @@ -44,12 +44,10 @@ job made one tool call, a fetch of the URL in the prompt, and returned the marke ## Who signed what -Both envelopes are signed by the Proofable service key -`0xa41494e1e5f9e5eaf786961e6ef84cd1a3071eec` (EIP-191 over the CAIP-380 verification message). -The signature means Proofable attests a statement its service observed. The `owner` inside each -envelope is the principal `0x0d4e513a3a7eb92bab65c97786c67b198d9dca15`, named by the service. The -principal signed nothing in this packet. The delegation the decision names is referenced by its -qHash and is not included. +The Proofable service wallet, address `0xa41494e1e5f9e5eaf786961e6ef84cd1a3071eec`, signs both +records (EIP-191 over the CAIP-380 verification message). The `owner` field in each record is the +account the job ran under, `0x0d4e513a3a7eb92bab65c97786c67b198d9dca15`. The decision names that +account's permission grant by its qHash. The grant itself is not in this packet. The decision commits to the request through `argsDigest`: SHA-256 of `JSON.stringify` over this object, in this key order. @@ -78,7 +76,7 @@ node verify.mjs `verify.mjs` prints `MATCH` for each of these, and exits non-zero on any mismatch: -1. Each envelope's signature recovers to the service key, and its qHash recomputes from the +1. Each envelope's signature recovers to the service wallet address, and its qHash recomputes from the envelope (SHAKE-256, 32 bytes, over the sorted canonical JSON of `did`, `verifierIds`, `data`, `signedTimestamp` and `chainId`). 2. `argsDigest` recomputes from `2-request-arguments.json`. diff --git a/public/evidence/aaif/authority-at-dispatch/2026-10-24-fetch-route/SHA256SUMS b/public/evidence/aaif/authority-at-dispatch/2026-10-24-fetch-route/SHA256SUMS index a71df4a..50eb608 100644 --- a/public/evidence/aaif/authority-at-dispatch/2026-10-24-fetch-route/SHA256SUMS +++ b/public/evidence/aaif/authority-at-dispatch/2026-10-24-fetch-route/SHA256SUMS @@ -6,4 +6,4 @@ 34688c283148a0524b550666fa74839b38410c26fd63425734a2753ba89f040c 6-terminal-receipt.json b6849d19f65356cb3da0a1d0d4e840c1e1244830c9c2a637641f0cf7cf468616 health-at-run.json d1919890e1d5ff3c5da0f552c90e09ef672e514c7f2dc3e35c91276358c926a6 verify.mjs -5bf14aa5dd602171336be09a83a692e0b4a26f49768203ae178f1bb8882800ec README.md +57dcce249c71c083f43f70f25bae4bf24d0904a201a664da3f4c181c43aeceed README.md