Verify a receipt offline

python -m pip install https://docs.soterias.io/downloads/api-preview/soterias_local-0.1.0rc5%2Bapi2-cp311-abi3-win_amd64.whl

npm install https://docs.soterias.io/downloads/api-preview/soterias-core-0.1.0-rc.5-api.2.tgz
npm install --save-dev typescript@5.8.3 @types/node@24

import json
import os
from pathlib import Path
from soterias import audit, VerificationError

import assert from 'node:assert/strict';
import fs from 'node:fs';
import path from 'node:path';
import { audit } from '@soterias/core';

# %% Select public trust independently of the receipt
# This historical teaching export was evaluated at 1300 milliseconds.
root = Path(os.environ["SOTERIAS_RECEIPTS"])
read = lambda name: (root / name).read_bytes()
verifier = audit.Verifier(read("trust.json"), read("anchor.json"),
                          read("authorization-policy.json"))

// %% Select public trust independently of the receipt
// This historical teaching export was evaluated at 1300 milliseconds.
const root = process.env.SOTERIAS_RECEIPTS!;
const read = (name: string) => fs.readFileSync(path.join(root, name));
const options = { trust: read('trust.json'), anchor: read('anchor.json'),
  policy: read('authorization-policy.json'), atMs: 1300n };

# %% Verify an original signed receipt offline
# This checks the pinned issuer signature and native binding/time rules.
receipt = audit.Receipt(read("record-0.json"))
result = verifier.verify(receipt, at_ms=1300)
assert result.assurance == "pinned_issuer_signature_and_bindings"

// %% Verify an original signed receipt offline
// This checks the pinned issuer signature and native binding/time rules.
const result = audit.verify(read('record-0.json'), options);
assert.equal(result.assurance, 'pinned_issuer_signature_and_bindings');

# %% Check that a changed signature is refused
# Verification authenticates the assertion; it does not grant current permission.
try:
    verifier.verify(audit.Receipt(read("forged-0.json")), at_ms=1300)
except VerificationError:
    pass
else:
    raise AssertionError("A changed signature was accepted")
print(json.dumps({"status": "PASS", "verified": 1, "signature_mutations_refused": 1,
                  "expected_binding_checked": result.expected_binding_checked}))

// %% Check that a changed signature is refused
// Verification authenticates the assertion; it does not grant current permission.
assert.throws(() => audit.verify(read('forged-0.json'), options));
console.log(JSON.stringify({ status: 'PASS', verified: 1, signature_mutations_refused: 1,
  expected_binding_checked: result.expectedBindingChecked }));

import { Soterias, observe, canonicalize, Metrics, audit, HistoricalPolicyInputs } from '@soterias/core';
import fs from 'node:fs';
import os from 'node:os';
import path from 'node:path';
import { McpServer } from '@modelcontextprotocol/server';
import { serveStdio } from '@modelcontextprotocol/server/stdio';
import * as z from 'zod/v4';

// Trusted startup: paths, trust and credentials are fixed by the host.
const read = name => fs.readFileSync(path.join(process.env.SOTERIAS_RECEIPTS, name));
const options = {trust: read('trust.json'), anchor: read('anchor.json'), policy: read('authorization-policy.json'), atMs: 1300n};

// Agent input is bounded data. It cannot replace host configuration or trust.
const handle = serveStdio(() => {
  const server = new McpServer({name: 'soterias-receipts', version: '1.0.0'});
  server.registerTool('verify_receipt', {
    description: 'Use receipts through the host-selected native SDK.',
    inputSchema: z.object({receiptJson: z.string().min(1).max(262144)}).strict(),
  }, async input => {
    try {
      const result = await (async () => {
        return audit.verify(Buffer.from(input.receiptJson), options);
      })();
      return {content: [{type: 'text', text: JSON.stringify(result, (_key, value) => typeof value === 'bigint' ? value.toString() : value)}]};

    } catch {
      return {isError: true, content: [{type: 'text', text: 'feature_request_refused'}]};
    }
  });
  return server;
}, {maxSubscriptions: 0});
process.stdin.once('end', () => {
  void (async () => { await handle.close();  })();
});

import fs from 'node:fs';
import path from 'node:path';
import { Client } from '@modelcontextprotocol/client';
import { StdioClientTransport } from '@modelcontextprotocol/client/stdio';
import { fileURLToPath } from 'node:url';

const client = new Client({name: 'feature-example', version: '1.0.0'});
try {
  await client.connect(new StdioClientTransport({
    command: process.execPath,
    args: [fileURLToPath(new URL('./mcp.mjs', import.meta.url))],
    env: Object.fromEntries(Object.entries(process.env).filter(([, value]) => value !== undefined)),
  }));
  const result = await client.callTool({name: 'verify_receipt', arguments: {receiptJson: fs.readFileSync(path.join(process.env.SOTERIAS_RECEIPTS, 'record-0.json'), 'utf8')}});
  if (result.isError) throw new Error('Feature request refused');
  console.log(JSON.stringify(result));
} finally { await client.close(); }