quipu_verdict_verify
Verify a signed verdict against the root of trust at signing time, checking that the key was registered and authorized for the predicate so consumers can gate trust decisions.
Instructions
Verify a signed Verdict against the root of trust AS OF the signature (signing-plane S1): the signature must be valid under a key registered to the verifier at that instant, AND that same registration must authorize the predicate. 'trusted' is that conjunction — the property a consumer should gate on. Pass 'verdict' (the stored verdict's IRI) for a trust decision: quipu then reads when the store recorded the signature, which the signer cannot choose. 'as_of.basis' says which instant was used (recorded | caller-supplied | now). A caller-supplied signed_at/tx is a what-if: 'trusted' is then always false and the answer is in 'would_verify_as_of_supplied_instant'.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tx | No | Explicit transaction to verify as of (a what-if query; default latest) | |
| tier | No | Evidence tier (default: committed) | |
| scheme | No | Signature scheme: ed25519 (default) | webauthn-es256 | webauthn-eddsa | sshsig-sk-ed25519. Hardware schemes are refused unless [quipu.governance] hardware_verdict_schemes is on, and verify only against registrations declaring the same aegis:signatureScheme | |
| outcome | Yes | Verdict outcome (satisfied | unsatisfied | unknown) | |
| verdict | No | IRI of the stored verdict carrying this signature; verify as of when the store recorded it (preferred for trust decisions) | |
| verifier | Yes | Verifier IRI whose registered key verifies the signature | |
| signature | Yes | The signature over the verdict message: hex for ed25519 (default); base64url DER/raw assertion signature for webauthn-*; the armored SSH SIGNATURE block for sshsig-sk-ed25519 | |
| signed_at | No | Explicit valid-time instant to verify at (a what-if query; default now) | |
| target_ref | Yes | Target the verdict is about | |
| predicate_id | Yes | Predicate the verdict attests | |
| evidence_hash | Yes | Evidence hash the signature seals | |
| client_data_json | No | webauthn-* only: base64url clientDataJSON from the assertion; its challenge must equal the one quipu derives from the verdict message | |
| authenticator_data | No | webauthn-* only: base64url authenticatorData from the assertion |