Skip to content

The fetch-route packet says who signed each record in plain words #22

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
chrisjleal merged 3 commits into from
Oct 26, 2026
Merged

The fetch-route packet says who signed each record in plain words #22

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
ef8b01d
The fetch-route packet says who signed each record in plain words
chrisjleal Oct 26, 2026
2048c8f
Name the signer as the Proofable service wallet, as the October 8 pac…
chrisjleal Oct 26, 2026
4c3b0a6
The checks list names the service wallet address
chrisjleal Oct 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 5 additions & 7 deletions public/evidence/aaif/authority-at-dispatch/2026-10-24-fetch-route/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,12 +44,10 @@ job made one tool call, a fetch of the URL in the prompt, and returned the marke

## Who signed what

Both envelopes are signed by the Proofable service key
`0xa41494e1e5f9e5eaf786961e6ef84cd1a3071eec` (EIP-191 over the CAIP-380 verification message).
The signature means Proofable attests a statement its service observed. The `owner` inside each
envelope is the principal `0x0d4e513a3a7eb92bab65c97786c67b198d9dca15`, named by the service. The
principal signed nothing in this packet. The delegation the decision names is referenced by its
qHash and is not included.
The Proofable service wallet, address `0xa41494e1e5f9e5eaf786961e6ef84cd1a3071eec`, signs both
records (EIP-191 over the CAIP-380 verification message). The `owner` field in each record is the
account the job ran under, `0x0d4e513a3a7eb92bab65c97786c67b198d9dca15`. The decision names that
account's permission grant by its qHash. The grant itself is not in this packet.

The decision commits to the request through `argsDigest`: SHA-256 of `JSON.stringify` over this
object, in this key order.
Expand Down Expand Up @@ -78,7 +76,7 @@ node verify.mjs

`verify.mjs` prints `MATCH` for each of these, and exits non-zero on any mismatch:

1. Each envelope's signature recovers to the service key, and its qHash recomputes from the
1. Each envelope's signature recovers to the service wallet address, and its qHash recomputes from the
envelope (SHAKE-256, 32 bytes, over the sorted canonical JSON of `did`, `verifierIds`, `data`,
`signedTimestamp` and `chainId`).
2. `argsDigest` recomputes from `2-request-arguments.json`.
Expand Down
2 changes: 1 addition & 1 deletion public/evidence/aaif/authority-at-dispatch/2026-10-24-fetch-route/SHA256SUMS
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,4 +6,4 @@
34688c283148a0524b550666fa74839b38410c26fd63425734a2753ba89f040c 6-terminal-receipt.json
b6849d19f65356cb3da0a1d0d4e840c1e1244830c9c2a637641f0cf7cf468616 health-at-run.json
d1919890e1d5ff3c5da0f552c90e09ef672e514c7f2dc3e35c91276358c926a6 verify.mjs
5bf14aa5dd602171336be09a83a692e0b4a26f49768203ae178f1bb8882800ec README.md
57dcce249c71c083f43f70f25bae4bf24d0904a201a664da3f4c181c43aeceed README.md
Loading