Skip to content

v1.5.10 — Hash-chain integrity verifier

Choose a tag to compare

@alex-jb alex-jb released this 05 Jul 22:29

previous_hash was populated in every attestation but never exercised. This ships the exercise: lib/attestation-chain.js primitive + POST /api/verify-chain + bin/verify-chain.mjs CLI over JSONL logs. Attack detection covered: truncation, reordering, mid-chain insertion, post-hoc edit cascades. Chain verification is separate from signature verification — run both. Tests 598 → 620 (+22).