@parmanasystems/verifier

Portable independent verification for governance attestations, runtime provenance, and execution integrity

@parmanasystems/verifier is the independent verification layer. It can verify any ExecutionAttestation without access to the runtime, replay store, or database — requiring only the attestation and the public key.

This package is designed to be deployed independently from the production system. Compliance teams, auditors, and regulators can install it and verify attestations offline.

Install

npm install @parmanasystems/verifier

Key exports

verifyAttestation(attestation, verifier): boolean

Verifies the Ed25519 signature over a canonical ExecutionAttestation.

import { verifyAttestation } from "@parmanasystems/verifier";

const valid = verifyAttestation(attestation, verifier);
// true — or throws InvariantViolation with a typed ViolationReport

Under the hood:

1. Reconstructs the canonical attestation JSON (keys sorted, no whitespace)
2. Decodes the base64 signature
3. Verifies with the Ed25519 public key

verifyBundle(bundle, signature, verifier): boolean

Verifies a signed governance bundle manifest.

verifyRuntime(manifest, requirements): boolean

Verifies that a runtime manifest satisfies version and schema compatibility requirements.

verifyRuntimeCompatibility(manifest, requirements): CompatibilityResult

Returns a detailed compatibility breakdown for version and schema checks.

verifyExecutionRequirements(token, requirements): boolean

Verifies that an execution token’s runtime requirements are satisfied.

Portable verification model

The verifier is stateless by design. No database, no runtime connection, no replay store — just:

attestation (JSON) + public key → valid: true/false

This is the property that makes Parmana Systems attestations useful for compliance: they can be verified by any party, at any time, with publicly available information.

CLI

The parmana verify command uses this package internally:

parmana verify artifact ./verification.json
parmana verify bundle bundle.json bundle.sig

See CLI Reference for full documentation.

Types

type VerificationResult = {
  valid:  boolean;
  checks: Record<string, boolean>;
  errors: string[];
};