verify_proof
Recomputes every leg subtotal and residual from supplied records to verify a financial proof under a chosen or loop policy, refuting mismatches and claims exceeding tolerance.
Instructions
Re-derive one proof from records you hold. Stateless, and it trusts nothing.
The verifier fetches each record by id, recomputes every leg subtotal and the residual from those records, and compares against what the proof claims. It reads no stored residual, takes its sign convention from policy rather than from the proof, and refuses a proof whose claimed tolerance exceeds the policy ceiling. A proof that names a record you did not supply is refuted, not excused.
Name a loop to verify under that loop's published policy, or hand in a
policy of your own. Exactly one — there is no default, because a
verification that silently chose a policy would be deciding your constraints
for you. The verdict says which you used: a lenient policy you brought along
yields a verdict about your constraints and is stamped caller-supplied
so it cannot be quoted back as ours.
This call is how you check our work without trusting us. Take a proof out of
audit_export, ingest the source files yourself with the published adapter
spec, and run it. If it disagrees with us, that is a finding about us.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| loop | No | ||
| proof | Yes | Evidence for one match. Immutable once emitted. | |
| policy | No | ||
| records | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||