verify_seal
Verify a PDF's embedded Omitly audit report and Ed25519 tamper-evidence seal locally, detecting any byte changes since sealing without uploading the file.
Instructions
Verify a PDF's embedded Omitly audit report and trailing Ed25519 tamper-evidence seal — on-device, nothing uploaded. Distinct from verify_redaction: that tool re-checks whether redacted regions are still empty; this tool cryptographically checks whether the delivered bytes have changed since they were sealed. The seal proves INTEGRITY, NOT IDENTITY: the signing key is per-install and travels with the file, so a valid seal means 'unchanged since sealed by the holder of this key', never 'produced by Omitly'. Compare sealFingerprint out-of-band against the fingerprint the sender published if origin matters. Requires a configured native engine — there is no wasm seal-verification path, so this always needs OMITLY_ENGINE_DIR/OMITLY_REDACT_BIN. A seal_unsupported_version verdict means this verifier is too old to check the seal at all — that is neither a pass nor a fail; update the verifier rather than trusting or rejecting the file on that basis.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| pdfPath | Yes | absolute path to the PDF to check for an Omitly audit report and seal |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| verdict | Yes | ||
| warnings | Yes | ||
| allPassed | Yes | ||
| pageCount | Yes | ||
| sealValid | Yes | ||
| inputSha256 | Yes | ||
| regionCount | Yes | ||
| sealVersion | Yes | ||
| outputSha256 | Yes | ||
| outputFilename | Yes | ||
| sourceFilename | Yes | ||
| decisionChannel | Yes | ||
| sealFingerprint | Yes | ||
| metadataScrubbed | Yes | ||
| licenseProvenance | Yes | ||
| carriesAuditReport | Yes |