Utilities
Verify an Ed25519 passport receipt with an explicit key
veritas-verify is an Ed25519 passport-receipt verification node that uses an explicit supplied public key.
overview
What veritas-verify does
Supply a JSON passport receipt and an explicit 64-character hexadecimal Ed25519 public key. The native Veritas verifier returns a JSON integrity report against that key. A supported receipt contains an object payload and a signature object with alg, kid and a 128-character hexadecimal sig.
Receipt input is limited to 1 MiB, native execution to 30 seconds, Node heap to 256 MiB and output to 4 MiB. The fixed operation uses receipt mode only, with no JWKS URL, credential or daemon. Input files remain unchanged.
Tampering or a wrong key produces successful task output with valid: false and invalid_signature. Malformed JSON, unsupported receipt shapes and other verifier failures fail the task. Inspect valid separately from node success.
This operation uses 0.10.21. Upstream license: Apache-2.0. The source link identifies the program used by this node.
source github.com/VeritasActa/verify/tree/5ab70b3c0ada4806e156fe1c6f8394df58333d1f
use cases
Where veritas-verify fits
Check receipt integrity
Verify a supported receipt against a public key you supply.
Detect changed payloads
Inspect valid: false when a payload or verification key does not match.
Keep key selection explicit
Choose the verification key explicitly rather than relying on remote key discovery.
reference
veritas-verify inputs and flags
| Name | Type | Flag | Description |
|---|---|---|---|
| input | FILE | --input | JSON passport receipt with object payload and hex Ed25519 signature, up to 1 MiB. |
| public-key | STRING | --public-key | Explicit verification public key, exactly 64 hexadecimal characters. Caller is responsible for trusting this key. |
Showing key inputs. veritas-verify exposes 2 inputs in total.
example
Run veritas-verify
node /app/run.mjs --input ./input.txt --public-key PUBLIC_KEY_HEX ./output{
"valid": true,
"keySource": "provided",
"format": "passport",
"kid": "fixture-ed25519",
"canonicalization": "jcs"
}guidance
Choosing veritas-verify
Use this node to check receipt integrity against a key you have chosen to trust. A valid signature does not establish signer trust or prove that the signed claims are true.
OpenSSH ssh-keygen
Fingerprints or operates on SSH keys; it does not verify this passport receipt format.
faq
veritas-verify questions
related
More Utilities tools
browser-fetch
Headless Chromium render: requested URL, final URL, status, and title next to the page.
cewl
Spider a URL and return a wordlist for password crackers.
csvkit
SQL on one CSV. The table name is the file stem.
dnsgen
Wordlist and mined-word subdomain permutation.
duckdb
In-process SQL on CSV, JSON, and Parquet. No server.
edge-tts
Microsoft Edge neural speech from text or a script file. No API key.
Run veritas-verify yourself
The synthetic run checks json signature result. The excerpt shows selected native fields asserted by saved passing platform verifier; reconstructed excerpt, not full raw artifact. The command shown is the container entrypoint with example paths, not a host-installed CLI command.
Facts on this page come from the live Trickest tool library.