verify_risk_attestation
Verifies a GBLIN Risk Attestation by checking integrity, signer authenticity, freshness, and live drift against current on-chain regime, so agents can confirm proof-of-diligence before relying on it.
Instructions
Verifies a GBLIN Risk Attestation, the object returned by GBLIN's /api/x402/attestation, or a proof-of-diligence attached by a peer agent. Free. Runs four checks: (1) integrity, by recomputing the EIP-712 attestation_id; (2) authenticity, by recovering the signer when a signature is present and comparing it with GBLIN's published attestor; (3) freshness, against on-chain time (10-minute validity); (4) live drift, by comparing the attested regime with the current on-chain regime.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| attestation | Yes | The full attestation object from /api/x402/attestation (must include `eip712`; `attestation_id`, `signature`, `attestor` are used when present). A JSON string of that object is also accepted. | |
| expected_attestor | No | Optional 0x address to check the signature against. Defaults to the GBLIN attestor address baked into this MCP build (GBLIN_ATTESTOR_ADDRESS env). |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| live | No | ||
| valid | Yes | True only if every check passed. | |
| checks | Yes | Each check by name, with its result. | |
| source | No | ||
| attested | No | ||
| guidance | No | ||
| recomputed_attestation_id | No |