navigatorbuilds.github.io

verify_mandate_bundle

Check offline whether an agent was authorized to perform an act, under a scoped, revocable mandate. Input is a bundle {bundle_version, act, mandates[], revocations[]} of signed carrier records. Returns {verdict, authorized, principal, signer, lineage[], scope_deferred, soundness_caveats[], checks[], explanation, reason}. HONEST SCOPE: a CONSISTENT verdict proves the signatures and that authority held at the act's signed time GIVEN ONLY THE RECORDS IN THIS BUNDLE. It does NOT prove those records are sealed or time-anchored, and it CANNOT detect a revocation the bundle's author withheld — which is why the verdict is CONSISTENT and never AUTHORIZED. Read soundness_caveats before relying on it. INPUT MUST BE RAW TEXT: pass the bundle exactly as read, never JSON.parse'd first — act nonces are u64 and round above JavaScript's 2^53 integer precision, so a parse/re-stringify round-trip corrupts the signed bytes (parsed objects are rejected with FAILED). Never throws: malformed input returns FAILED.

Page: /elara-mesh/verify/

Input schema

{
  "type": "object",
  "properties": {
    "bundle_json": {
      "type": "string",
      "description": "The mandate bundle envelope as RAW JSON text, exactly as read — never re-serialised from JSON.parse (u64 nonces round above 2^53; see tool description)."
    }
  },
  "required": [
    "bundle_json"
  ]
}