Verify a grant receipt
verify_grant_receiptVerify a Forestrie grant receipt against the committed grant at a chosen trust rung to confirm the leaf is the grant, answering the append-authority question.
Instructions
Verify a Forestrie grant receipt against the committed grant (Forestrie-Grant COSE Sign1, or raw grant payload CBOR plus an entry id), at a trust rung you choose. Mirrors forestrie verify-grant. This is the tool that answers the append-authority question: the leaf IS the grant.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| trust | Yes | Which anchor you are willing to trust (plan-2609-02 D2/D3) | |
| entryId | No | required when committedGrant is a raw payload | |
| receipt | Yes | the COSE receipt | |
| committedGrant | Yes | Forestrie-Grant COSE Sign1, or raw grant payload CBOR |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ok | Yes | ||
| rung | Yes | ||
| stage | Yes | ||
| anchor | No | ||
| reason | No | ||
| stages | Yes | the mechanical stages, exactly the reference CLI's contract | |
| verifier | Yes | ||
| questions | Yes | the four trust questions. 'not_answered_at_this_rung' is a real answer and must be shown to the user, never collapsed into a pass. | |
| diagnostics | Yes | named notes about what the arithmetic could not separate |