v1.5.0

Verifier 1.5.0 checks LedgerSeal evidence format 2 (LedgerSeal 4.0.0: code signing, approval routes and signing on the transition screen). verify-evidence.mjs runs the format 2 checks whenever the evidence content needs them, whatever the unsigned format field says:

• signing policies, and code signing on every signature that needs it (by the policy and project each entry names);
• the declaration text of each signature, which must fit its action (approve, reject or revoke);
• route versions;
• the stage signatures of the sealing run;
• quorum and stage order;
• one stage per person;
• no entry of a run after the entry that ended it.

Format 1 output and exit codes are the same as 1.3.0. Adds vectors-route-1.json for --self-test. The FourRealities report verifier (1.4.0) and the public keys are unchanged.

Check the assets with sha256sum -c SHA256SUMS.