[{"data":1,"prerenderedAt":4177},["ShallowReactive",2],{"navigation":3,"\u002Frecipes\u002Fattestation-verifier":927},[4,40,114,446,474,498,596,903],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,14,28,32,36],{"title":10,"path":6,"stem":11,"access":12,"icon":13},"Overview","architecture\u002Findex","public","i-lucide-network",{"title":10,"path":15,"stem":16,"children":17,"access":12,"icon":19},"\u002Farchitecture\u002Fkernel","architecture\u002F1.kernel\u002Findex",[18,20,24],{"title":10,"path":15,"stem":16,"access":12,"icon":19},"i-lucide-box",{"title":21,"path":22,"stem":23,"access":12},"Enclave","\u002Farchitecture\u002Fkernel\u002Fenclave","architecture\u002F1.kernel\u002Fenclave",{"title":25,"path":26,"stem":27,"access":12},"Forking the enclave","\u002Farchitecture\u002Fkernel\u002Fforking-the-enclave","architecture\u002F1.kernel\u002Fforking-the-enclave",{"title":29,"path":30,"stem":31,"access":12},"Ports","\u002Farchitecture\u002Fports","architecture\u002F2.ports",{"title":33,"path":34,"stem":35,"access":12},"Service layers","\u002Farchitecture\u002Fservice-layers","architecture\u002F3.service-layers",{"title":37,"path":38,"stem":39,"access":12},"Families","\u002Farchitecture\u002Ffamilies","architecture\u002F4.families",{"title":41,"path":42,"stem":43,"children":44},"Core","\u002Fcore","core",[45,47,50,53,56,88,97],{"title":10,"path":42,"stem":46,"access":12,"icon":19},"core\u002Findex",{"title":10,"path":48,"stem":49,"access":12},"\u002Fcore\u002F01-overview","core\u002F01-overview",{"title":10,"path":51,"stem":52,"access":12},"\u002Fcore\u002F05-stores","core\u002F05-stores",{"title":10,"path":54,"stem":55,"access":12},"\u002Fcore\u002F06-permissions-and-keyring","core\u002F06-permissions-and-keyring",{"title":10,"path":57,"stem":58,"children":59,"access":12},"\u002Fcore\u002Fnoydb","core\u002F2.noydb\u002Findex",[60,61,65,68,72,76,80,84],{"title":10,"path":57,"stem":58,"access":12},{"title":62,"path":63,"stem":64,"access":12},"Noydb","\u002Fcore\u002Fnoydb\u002Fmethods","core\u002F2.noydb\u002F1.methods",{"title":21,"path":66,"stem":67,"access":12},"\u002Fcore\u002Fnoydb\u002Fenclave","core\u002F2.noydb\u002F2.enclave",{"title":69,"path":70,"stem":71,"access":12},"Secret & keyring","\u002Fcore\u002Fnoydb\u002Fkeyring","core\u002F2.noydb\u002F3.keyring",{"title":73,"path":74,"stem":75,"access":12},"Authentication","\u002Fcore\u002Fnoydb\u002Fauthentication","core\u002F2.noydb\u002F4.authentication",{"title":77,"path":78,"stem":79,"access":12},"Auth recovery","\u002Fcore\u002Fnoydb\u002Frecovery","core\u002F2.noydb\u002F5.recovery",{"title":81,"path":82,"stem":83,"access":12},"Configuration","\u002Fcore\u002Fnoydb\u002Fconfiguration","core\u002F2.noydb\u002F6.configuration",{"title":85,"path":86,"stem":87,"access":12},"Strategies","\u002Fcore\u002Fnoydb\u002Fstrategies","core\u002F2.noydb\u002F7.strategies",{"title":10,"path":89,"stem":90,"children":91,"access":12},"\u002Fcore\u002Fvault","core\u002F3.vault\u002Findex",[92,93],{"title":10,"path":89,"stem":90,"access":12},{"title":94,"path":95,"stem":96,"access":12},"Vault","\u002Fcore\u002Fvault\u002Fmethods","core\u002F3.vault\u002F1.methods",{"title":10,"path":98,"stem":99,"children":100,"access":12},"\u002Fcore\u002Fcollection","core\u002F4.collection\u002Findex",[101,102,106,110],{"title":10,"path":98,"stem":99,"access":12},{"title":103,"path":104,"stem":105,"access":12},"Collection","\u002Fcore\u002Fcollection\u002Fmethods","core\u002F4.collection\u002F1.methods",{"title":107,"path":108,"stem":109,"access":12},"Querying","\u002Fcore\u002Fcollection\u002Fquerying","core\u002F4.collection\u002F2.querying",{"title":111,"path":112,"stem":113,"access":12},"Schema","\u002Fcore\u002Fcollection\u002Fschema","core\u002F4.collection\u002F3.schema",{"title":37,"path":115,"stem":116,"children":117},"\u002Ffamilies","families",[118,121,168,194,208,212,216,294,340],{"title":10,"path":115,"stem":119,"access":12,"icon":120},"families\u002Findex","i-lucide-plug",{"title":122,"path":123,"stem":124,"children":125,"access":12,"icon":127},"as-Exports","\u002Ffamilies\u002Fas","families\u002Fas\u002Findex",[126,128,132,136,140,144,148,152,156,160,164],{"title":122,"path":123,"stem":124,"access":12,"icon":127},"i-lucide-book-open",{"title":129,"path":130,"stem":131,"access":12},"aws-s3","\u002Ffamilies\u002Fas\u002Faws-s3","families\u002Fas\u002Faws-s3",{"title":133,"path":134,"stem":135,"access":12},"blob","\u002Ffamilies\u002Fas\u002Fblob","families\u002Fas\u002Fblob",{"title":137,"path":138,"stem":139,"access":12},"csv","\u002Ffamilies\u002Fas\u002Fcsv","families\u002Fas\u002Fcsv",{"title":141,"path":142,"stem":143,"access":12},"json","\u002Ffamilies\u002Fas\u002Fjson","families\u002Fas\u002Fjson",{"title":145,"path":146,"stem":147,"access":12},"ndjson","\u002Ffamilies\u002Fas\u002Fndjson","families\u002Fas\u002Fndjson",{"title":149,"path":150,"stem":151,"access":12},"noydb","\u002Ffamilies\u002Fas\u002Fnoydb","families\u002Fas\u002Fnoydb",{"title":153,"path":154,"stem":155,"access":12},"sql","\u002Ffamilies\u002Fas\u002Fsql","families\u002Fas\u002Fsql",{"title":157,"path":158,"stem":159,"access":12},"xlsx","\u002Ffamilies\u002Fas\u002Fxlsx","families\u002Fas\u002Fxlsx",{"title":161,"path":162,"stem":163,"access":12},"xml","\u002Ffamilies\u002Fas\u002Fxml","families\u002Fas\u002Fxml",{"title":165,"path":166,"stem":167,"access":12},"zip","\u002Ffamilies\u002Fas\u002Fzip","families\u002Fas\u002Fzip",{"title":169,"path":170,"stem":171,"children":172,"access":12,"icon":127},"at-Seals","\u002Ffamilies\u002Fat","families\u002Fat\u002Findex",[173,174,178,182,186,190],{"title":169,"path":170,"stem":171,"access":12,"icon":127},{"title":175,"path":176,"stem":177,"access":12},"aws-kms","\u002Ffamilies\u002Fat\u002Faws-kms","families\u002Fat\u002Faws-kms",{"title":179,"path":180,"stem":181,"access":12},"azure-keyvault","\u002Ffamilies\u002Fat\u002Fazure-keyvault","families\u002Fat\u002Fazure-keyvault",{"title":183,"path":184,"stem":185,"access":12},"env","\u002Ffamilies\u002Fat\u002Fenv","families\u002Fat\u002Fenv",{"title":187,"path":188,"stem":189,"access":12},"gcp-kms","\u002Ffamilies\u002Fat\u002Fgcp-kms","families\u002Fat\u002Fgcp-kms",{"title":191,"path":192,"stem":193,"access":12},"macos-keychain","\u002Ffamilies\u002Fat\u002Fmacos-keychain","families\u002Fat\u002Fmacos-keychain",{"title":195,"path":196,"stem":197,"children":198,"access":12,"icon":127},"by-Sessions","\u002Ffamilies\u002Fby","families\u002Fby\u002Findex",[199,200,204],{"title":195,"path":196,"stem":197,"access":12,"icon":127},{"title":201,"path":202,"stem":203,"access":12},"peer","\u002Ffamilies\u002Fby\u002Fpeer","families\u002Fby\u002Fpeer",{"title":205,"path":206,"stem":207,"access":12},"tabs","\u002Ffamilies\u002Fby\u002Ftabs","families\u002Fby\u002Ftabs",{"title":209,"path":210,"stem":211,"access":12},"Classifying a package","\u002Ffamilies\u002Fclassification","families\u002Fclassification",{"title":213,"path":214,"stem":215,"access":12},"Command-line tools","\u002Ffamilies\u002Fcli","families\u002Fcli",{"title":217,"path":218,"stem":219,"children":220,"access":12,"icon":127},"in-Frameworks","\u002Ffamilies\u002Fin","families\u002Fin\u002Findex",[221,222,226,230,234,238,242,246,250,254,258,262,266,270,274,278,282,286,290],{"title":217,"path":218,"stem":219,"access":12,"icon":127},{"title":223,"path":224,"stem":225,"access":12},"ai","\u002Ffamilies\u002Fin\u002Fai","families\u002Fin\u002Fai",{"title":227,"path":228,"stem":229,"access":12},"devtools","\u002Ffamilies\u002Fin\u002Fdevtools","families\u002Fin\u002Fdevtools",{"title":231,"path":232,"stem":233,"access":12},"devtools-tui","\u002Ffamilies\u002Fin\u002Fdevtools-tui","families\u002Fin\u002Fdevtools-tui",{"title":235,"path":236,"stem":237,"access":12},"liff","\u002Ffamilies\u002Fin\u002Fliff","families\u002Fin\u002Fliff",{"title":239,"path":240,"stem":241,"access":12},"nextjs","\u002Ffamilies\u002Fin\u002Fnextjs","families\u002Fin\u002Fnextjs",{"title":243,"path":244,"stem":245,"access":12},"nuxt","\u002Ffamilies\u002Fin\u002Fnuxt","families\u002Fin\u002Fnuxt",{"title":247,"path":248,"stem":249,"access":12},"pinia","\u002Ffamilies\u002Fin\u002Fpinia","families\u002Fin\u002Fpinia",{"title":251,"path":252,"stem":253,"access":12},"pwa","\u002Ffamilies\u002Fin\u002Fpwa","families\u002Fin\u002Fpwa",{"title":255,"path":256,"stem":257,"access":12},"react","\u002Ffamilies\u002Fin\u002Freact","families\u002Fin\u002Freact",{"title":259,"path":260,"stem":261,"access":12},"relay","\u002Ffamilies\u002Fin\u002Frelay","families\u002Fin\u002Frelay",{"title":263,"path":264,"stem":265,"access":12},"rest","\u002Ffamilies\u002Fin\u002Frest","families\u002Fin\u002Frest",{"title":267,"path":268,"stem":269,"access":12},"solid","\u002Ffamilies\u002Fin\u002Fsolid","families\u002Fin\u002Fsolid",{"title":271,"path":272,"stem":273,"access":12},"svelte","\u002Ffamilies\u002Fin\u002Fsvelte","families\u002Fin\u002Fsvelte",{"title":275,"path":276,"stem":277,"access":12},"tanstack-query","\u002Ffamilies\u002Fin\u002Ftanstack-query","families\u002Fin\u002Ftanstack-query",{"title":279,"path":280,"stem":281,"access":12},"tanstack-table","\u002Ffamilies\u002Fin\u002Ftanstack-table","families\u002Fin\u002Ftanstack-table",{"title":283,"path":284,"stem":285,"access":12},"vue","\u002Ffamilies\u002Fin\u002Fvue","families\u002Fin\u002Fvue",{"title":287,"path":288,"stem":289,"access":12},"yjs","\u002Ffamilies\u002Fin\u002Fyjs","families\u002Fin\u002Fyjs",{"title":291,"path":292,"stem":293,"access":12},"zustand","\u002Ffamilies\u002Fin\u002Fzustand","families\u002Fin\u002Fzustand",{"title":295,"path":296,"stem":297,"children":298,"access":12,"icon":127},"on-Auth","\u002Ffamilies\u002Fon","families\u002Fon\u002Findex",[299,300,304,308,312,316,320,324,328,332,336],{"title":295,"path":296,"stem":297,"access":12,"icon":127},{"title":301,"path":302,"stem":303,"access":12},"email-otp","\u002Ffamilies\u002Fon\u002Femail-otp","families\u002Fon\u002Femail-otp",{"title":305,"path":306,"stem":307,"access":12},"magic-link","\u002Ffamilies\u002Fon\u002Fmagic-link","families\u002Fon\u002Fmagic-link",{"title":309,"path":310,"stem":311,"access":12},"oidc","\u002Ffamilies\u002Fon\u002Foidc","families\u002Fon\u002Foidc",{"title":313,"path":314,"stem":315,"access":12},"password","\u002Ffamilies\u002Fon\u002Fpassword","families\u002Fon\u002Fpassword",{"title":317,"path":318,"stem":319,"access":12},"pin","\u002Ffamilies\u002Fon\u002Fpin","families\u002Fon\u002Fpin",{"title":321,"path":322,"stem":323,"access":12},"recovery","\u002Ffamilies\u002Fon\u002Frecovery","families\u002Fon\u002Frecovery",{"title":325,"path":326,"stem":327,"access":12},"shamir","\u002Ffamilies\u002Fon\u002Fshamir","families\u002Fon\u002Fshamir",{"title":329,"path":330,"stem":331,"access":12},"threat","\u002Ffamilies\u002Fon\u002Fthreat","families\u002Fon\u002Fthreat",{"title":333,"path":334,"stem":335,"access":12},"totp","\u002Ffamilies\u002Fon\u002Ftotp","families\u002Fon\u002Ftotp",{"title":337,"path":338,"stem":339,"access":12},"webauthn","\u002Ffamilies\u002Fon\u002Fwebauthn","families\u002Fon\u002Fwebauthn",{"title":341,"path":342,"stem":343,"children":344,"access":12,"icon":127},"to-Stores","\u002Ffamilies\u002Fto","families\u002Fto\u002Findex",[345,346,350,353,357,361,365,370,374,378,382,386,390,394,398,402,406,410,414,417,421,425,429,434,438,442],{"title":341,"path":342,"stem":343,"access":12,"icon":127},{"title":347,"path":348,"stem":349,"access":12},"aws-dynamo","\u002Ffamilies\u002Fto\u002Faws-dynamo","families\u002Fto\u002Faws-dynamo",{"title":129,"path":351,"stem":352,"access":12},"\u002Ffamilies\u002Fto\u002Faws-s3","families\u002Fto\u002Faws-s3",{"title":354,"path":355,"stem":356,"access":12},"browser-fs","\u002Ffamilies\u002Fto\u002Fbrowser-fs","families\u002Fto\u002Fbrowser-fs",{"title":358,"path":359,"stem":360,"access":12},"browser-idb","\u002Ffamilies\u002Fto\u002Fbrowser-idb","families\u002Fto\u002Fbrowser-idb",{"title":362,"path":363,"stem":364,"access":12},"browser-local","\u002Ffamilies\u002Fto\u002Fbrowser-local","families\u002Fto\u002Fbrowser-local",{"title":366,"path":367,"stem":368,"access":12,"icon":369},"Choosing a store","\u002Ffamilies\u002Fto\u002Fchoosing-a-store","families\u002Fto\u002Fchoosing-a-store","i-lucide-split",{"title":371,"path":372,"stem":373,"access":12},"cloudflare-d1","\u002Ffamilies\u002Fto\u002Fcloudflare-d1","families\u002Fto\u002Fcloudflare-d1",{"title":375,"path":376,"stem":377,"access":12},"cloudflare-r2","\u002Ffamilies\u002Fto\u002Fcloudflare-r2","families\u002Fto\u002Fcloudflare-r2",{"title":379,"path":380,"stem":381,"access":12},"drive","\u002Ffamilies\u002Fto\u002Fdrive","families\u002Fto\u002Fdrive",{"title":383,"path":384,"stem":385,"access":12},"file","\u002Ffamilies\u002Fto\u002Ffile","families\u002Fto\u002Ffile",{"title":387,"path":388,"stem":389,"access":12},"icloud","\u002Ffamilies\u002Fto\u002Ficloud","families\u002Fto\u002Ficloud",{"title":391,"path":392,"stem":393,"access":12},"memory","\u002Ffamilies\u002Fto\u002Fmemory","families\u002Fto\u002Fmemory",{"title":395,"path":396,"stem":397,"access":12},"meter","\u002Ffamilies\u002Fto\u002Fmeter","families\u002Fto\u002Fmeter",{"title":399,"path":400,"stem":401,"access":12},"mysql","\u002Ffamilies\u002Fto\u002Fmysql","families\u002Fto\u002Fmysql",{"title":403,"path":404,"stem":405,"access":12},"nfs","\u002Ffamilies\u002Fto\u002Fnfs","families\u002Fto\u002Fnfs",{"title":407,"path":408,"stem":409,"access":12},"postgres","\u002Ffamilies\u002Fto\u002Fpostgres","families\u002Fto\u002Fpostgres",{"title":411,"path":412,"stem":413,"access":12},"probe","\u002Ffamilies\u002Fto\u002Fprobe","families\u002Fto\u002Fprobe",{"title":263,"path":415,"stem":416,"access":12},"\u002Ffamilies\u002Fto\u002Frest","families\u002Fto\u002Frest",{"title":418,"path":419,"stem":420,"access":12},"smb","\u002Ffamilies\u002Fto\u002Fsmb","families\u002Fto\u002Fsmb",{"title":422,"path":423,"stem":424,"access":12},"sqlite","\u002Ffamilies\u002Fto\u002Fsqlite","families\u002Fto\u002Fsqlite",{"title":426,"path":427,"stem":428,"access":12},"ssh","\u002Ffamilies\u002Fto\u002Fssh","families\u002Fto\u002Fssh",{"title":430,"path":431,"stem":432,"access":12,"icon":433},"Store-locator descriptors","\u002Ffamilies\u002Fto\u002Fstore-locator","families\u002Fto\u002Fstore-locator","i-lucide-map-pin",{"title":435,"path":436,"stem":437,"access":12},"supabase","\u002Ffamilies\u002Fto\u002Fsupabase","families\u002Fto\u002Fsupabase",{"title":439,"path":440,"stem":441,"access":12},"turso","\u002Ffamilies\u002Fto\u002Fturso","families\u002Fto\u002Fturso",{"title":443,"path":444,"stem":445,"access":12},"webdav","\u002Ffamilies\u002Fto\u002Fwebdav","families\u002Fto\u002Fwebdav",{"title":447,"path":448,"stem":449,"children":450},"Faq","\u002Ffaq","faq",[451,454,458,462,466,470],{"title":10,"path":448,"stem":452,"access":12,"icon":453},"faq\u002Findex","i-lucide-circle-help",{"title":455,"path":456,"stem":457,"access":12},"Where can noy-db run?","\u002Ffaq\u002Fwhere-can-noy-db-run","faq\u002F1.where-can-noy-db-run",{"title":459,"path":460,"stem":461,"access":12},"Native mobile & PWA","\u002Ffaq\u002Fmobile-and-pwa","faq\u002F2.mobile-and-pwa",{"title":463,"path":464,"stem":465,"access":12},"Threat model","\u002Ffaq\u002Fthreat-model","faq\u002F3.threat-model",{"title":467,"path":468,"stem":469,"access":12},"Community & ecosystem","\u002Ffaq\u002Fcommunity-and-ecosystem","faq\u002F4.community-and-ecosystem",{"title":471,"path":472,"stem":473,"access":12},"Licensing","\u002Ffaq\u002Flicensing","faq\u002F5.licensing",{"title":475,"path":476,"stem":477,"children":478},"Glossary","\u002Fglossary","glossary",[479,482,486,490,494],{"title":10,"path":476,"stem":480,"access":12,"icon":481},"glossary\u002Findex","i-lucide-book-a",{"title":483,"path":484,"stem":485,"access":12},"Core vocabulary","\u002Fglossary\u002Fcore-vocabulary","glossary\u002Fcore-vocabulary",{"title":487,"path":488,"stem":489,"access":12},"Deletion vocabulary","\u002Fglossary\u002Fdeletion","glossary\u002Fdeletion",{"title":491,"path":492,"stem":493,"access":12},"Satellite collection vocabulary","\u002Fglossary\u002Fsatellite-collections","glossary\u002Fsatellite-collections",{"title":495,"path":496,"stem":497,"access":12},"Schema migration vocabulary","\u002Fglossary\u002Fschema-migration","glossary\u002Fschema-migration",{"title":499,"path":500,"stem":501,"children":502},"Recipes","\u002Frecipes","recipes",[503,506,510,514,518,522,526,530,534,538,542,546,550,554,558,562,567,571,575,580,584,588,592],{"title":10,"path":500,"stem":504,"access":12,"icon":505},"recipes\u002Findex","i-lucide-play",{"title":507,"path":508,"stem":509,"access":12},"Accounting app","\u002Frecipes\u002Faccounting-app","recipes\u002Faccounting-app",{"title":511,"path":512,"stem":513,"access":12},"Analytics app","\u002Frecipes\u002Fanalytics-app","recipes\u002Fanalytics-app",{"title":515,"path":516,"stem":517,"access":12},"Attestation verifier","\u002Frecipes\u002Fattestation-verifier","recipes\u002Fattestation-verifier",{"title":519,"path":520,"stem":521,"access":12},"AWS-KMS attestation","\u002Frecipes\u002Faws-kms-pdf-attestation","recipes\u002Faws-kms-pdf-attestation",{"title":523,"path":524,"stem":525,"access":12},"Browser durability","\u002Frecipes\u002Fbrowser-durability","recipes\u002Fbrowser-durability",{"title":527,"path":528,"stem":529,"access":12},"Production cloud store","\u002Frecipes\u002Fcloud-store","recipes\u002Fcloud-store",{"title":531,"path":532,"stem":533,"access":12},"Compose your own setup","\u002Frecipes\u002Fcompose-your-own","recipes\u002Fcompose-your-own",{"title":535,"path":536,"stem":537,"access":12},"Confidential HR records","\u002Frecipes\u002Fconfidential-hr","recipes\u002Fconfidential-hr",{"title":539,"path":540,"stem":541,"access":12},"Composing an echo secret","\u002Frecipes\u002Fecho-secret-enrollment","recipes\u002Fecho-secret-enrollment",{"title":543,"path":544,"stem":545,"access":12},"Email archive","\u002Frecipes\u002Femail-archive","recipes\u002Femail-archive",{"title":547,"path":548,"stem":549,"access":12},"Email archive — threads & revisions","\u002Frecipes\u002Femail-archive-threads-revisions","recipes\u002Femail-archive-threads-revisions",{"title":551,"path":552,"stem":553,"access":12},"Export & portability","\u002Frecipes\u002Fexport-portability","recipes\u002Fexport-portability",{"title":555,"path":556,"stem":557,"access":12},"Passwordless OIDC (AWS Cognito)","\u002Frecipes\u002Fpasswordless-oidc","recipes\u002Fpasswordless-oidc",{"title":559,"path":560,"stem":561,"access":12},"Personal notebook","\u002Frecipes\u002Fpersonal-notebook","recipes\u002Fpersonal-notebook",{"title":563,"path":564,"stem":565,"access":12,"icon":566},"Playgrounds","\u002Frecipes\u002Fplaygrounds","recipes\u002Fplaygrounds","i-lucide-gamepad-2",{"title":568,"path":569,"stem":570,"access":12},"React invoice app","\u002Frecipes\u002Freact-invoices","recipes\u002Freact-invoices",{"title":572,"path":573,"stem":574,"access":12},"Collaborative app","\u002Frecipes\u002Frealtime-crdt-app","recipes\u002Frealtime-crdt-app",{"title":576,"path":577,"stem":578,"access":12,"icon":579},"Run the showcases","\u002Frecipes\u002Frun-the-showcases","recipes\u002Frun-the-showcases","i-lucide-flask-conical",{"title":581,"path":582,"stem":583,"access":12},"Search & RAG","\u002Frecipes\u002Fsearch-rag","recipes\u002Fsearch-rag",{"title":585,"path":586,"stem":587,"access":12},"Team vault topology","\u002Frecipes\u002Fteam-vault-topology","recipes\u002Fteam-vault-topology",{"title":589,"path":590,"stem":591,"access":12},"Unlock ceremonies","\u002Frecipes\u002Funlock-ceremonies","recipes\u002Funlock-ceremonies",{"title":593,"path":594,"stem":595,"access":12},"User preferences","\u002Frecipes\u002Fuser-preferences","recipes\u002Fuser-preferences",{"title":597,"path":598,"stem":599,"children":600},"Services","\u002Fservices","services",[601,604,608,612,616,620,624,628,632,636,640,644,648,652,656,660,664,668,672,676,680,684,688,692,696,700,704,710,714,718,722,726,730,734,738,742,746,750,755,759,763,767,771,775,779,783,787,791,795,799,803,807,811,815,819,823,827,831,835,839,843,847,851,855,859,863,867,871,875,879,883,887,891,895,899],{"title":10,"path":598,"stem":602,"access":12,"icon":603},"services\u002Findex","i-lucide-layers",{"title":605,"path":606,"stem":607,"access":12},"archive","\u002Fservices\u002Farchive","services\u002Farchive",{"title":609,"path":610,"stem":611,"access":12},"attestation","\u002Fservices\u002Fattestation","services\u002Fattestation",{"title":613,"path":614,"stem":615,"access":12},"auth-introspection","\u002Fservices\u002Fauth-introspection","services\u002Fauth-introspection",{"title":617,"path":618,"stem":619,"access":12},"auth-landscape","\u002Fservices\u002Fauth-landscape","services\u002Fauth-landscape",{"title":621,"path":622,"stem":623,"access":12},"blobs","\u002Fservices\u002Fblobs","services\u002Fblobs",{"title":625,"path":626,"stem":627,"access":12},"broker","\u002Fservices\u002Fbroker","services\u002Fbroker",{"title":629,"path":630,"stem":631,"access":12},"bundle","\u002Fservices\u002Fbundle","services\u002Fbundle",{"title":633,"path":634,"stem":635,"access":12},"classified","\u002Fservices\u002Fclassified","services\u002Fclassified",{"title":637,"path":638,"stem":639,"access":12},"computed","\u002Fservices\u002Fcomputed","services\u002Fcomputed",{"title":641,"path":642,"stem":643,"access":12},"consent","\u002Fservices\u002Fconsent","services\u002Fconsent",{"title":645,"path":646,"stem":647,"access":12},"cover","\u002Fservices\u002Fcover","services\u002Fcover",{"title":649,"path":650,"stem":651,"access":12},"coverage","\u002Fservices\u002Fcoverage","services\u002Fcoverage",{"title":653,"path":654,"stem":655,"access":12},"crdt","\u002Fservices\u002Fcrdt","services\u002Fcrdt",{"title":657,"path":658,"stem":659,"access":12},"cross-join","\u002Fservices\u002Fcross-join","services\u002Fcross-join",{"title":661,"path":662,"stem":663,"access":12},"custody","\u002Fservices\u002Fcustody","services\u002Fcustody",{"title":665,"path":666,"stem":667,"access":12},"derivations","\u002Fservices\u002Fderivations","services\u002Fderivations",{"title":669,"path":670,"stem":671,"access":12},"directory","\u002Fservices\u002Fdirectory","services\u002Fdirectory",{"title":673,"path":674,"stem":675,"access":12},"search — AI","\u002Fservices\u002Fembeddings","services\u002Fembeddings",{"title":677,"path":678,"stem":679,"access":12},"Field metadata","\u002Fservices\u002Ffield-metadata","services\u002Ffield-metadata",{"title":681,"path":682,"stem":683,"access":12},"Foreign refs","\u002Fservices\u002Fforeign-refs","services\u002Fforeign-refs",{"title":685,"path":686,"stem":687,"access":12},"forget","\u002Fservices\u002Fforget","services\u002Fforget",{"title":689,"path":690,"stem":691,"access":12},"governance","\u002Fservices\u002Fgovernance","services\u002Fgovernance",{"title":693,"path":694,"stem":695,"access":12},"guards","\u002Fservices\u002Fguards","services\u002Fguards",{"title":697,"path":698,"stem":699,"access":12},"history","\u002Fservices\u002Fhistory","services\u002Fhistory",{"title":701,"path":702,"stem":703,"access":12},"i18n","\u002Fservices\u002Fi18n","services\u002Fi18n",{"title":705,"path":706,"stem":707,"children":708,"access":12},"indexing","\u002Fservices\u002Findexing","services\u002Findexing",[709],{"title":705,"path":706,"stem":707,"access":12},{"title":711,"path":712,"stem":713,"access":12},"introspection","\u002Fservices\u002Fintrospection","services\u002Fintrospection",{"title":715,"path":716,"stem":717,"access":12},"joins","\u002Fservices\u002Fjoins","services\u002Fjoins",{"title":719,"path":720,"stem":721,"access":12},"lazy","\u002Fservices\u002Flazy","services\u002Flazy",{"title":723,"path":724,"stem":725,"access":12},"links","\u002Fservices\u002Flinks","services\u002Flinks",{"title":727,"path":728,"stem":729,"access":12},"live","\u002Fservices\u002Flive","services\u002Flive",{"title":731,"path":732,"stem":733,"access":12},"lookup","\u002Fservices\u002Flookup","services\u002Flookup",{"title":735,"path":736,"stem":737,"access":12},"manifest","\u002Fservices\u002Fmanifest","services\u002Fmanifest",{"title":739,"path":740,"stem":741,"access":12},"materialized-views","\u002Fservices\u002Fmaterialized-views","services\u002Fmaterialized-views",{"title":743,"path":744,"stem":745,"access":12},"Metadata ladder","\u002Fservices\u002Fmetadata-ladder","services\u002Fmetadata-ladder",{"title":747,"path":748,"stem":749,"access":12},"Metadata riders","\u002Fservices\u002Fmetadata-riders","services\u002Fmetadata-riders",{"title":751,"path":752,"stem":753,"access":12,"badge":754},"metrics","\u002Fservices\u002Fmetrics","services\u002Fmetrics","Planned",{"title":756,"path":757,"stem":758,"access":12,"badge":754},"migrations","\u002Fservices\u002Fmigrations","services\u002Fmigrations",{"title":760,"path":761,"stem":762,"access":12},"money","\u002Fservices\u002Fmoney","services\u002Fmoney",{"title":764,"path":765,"stem":766,"access":12},"numbering","\u002Fservices\u002Fnumbering","services\u002Fnumbering",{"title":768,"path":769,"stem":770,"access":12},"overlay-views","\u002Fservices\u002Foverlay-views","services\u002Foverlay-views",{"title":772,"path":773,"stem":774,"access":12,"badge":754},"partitioning","\u002Fservices\u002Fpartitioning","services\u002Fpartitioning",{"title":776,"path":777,"stem":778,"access":12},"periods","\u002Fservices\u002Fperiods","services\u002Fperiods",{"title":780,"path":781,"stem":782,"access":12},"persisted-schemas","\u002Fservices\u002Fpersisted-schemas","services\u002Fpersisted-schemas",{"title":784,"path":785,"stem":786,"access":12},"plaintext-bypass","\u002Fservices\u002Fplaintext-bypass","services\u002Fplaintext-bypass",{"title":788,"path":789,"stem":790,"access":12},"pod-redirect","\u002Fservices\u002Fpod-redirect","services\u002Fpod-redirect",{"title":792,"path":793,"stem":794,"access":12},"pod-signature","\u002Fservices\u002Fpod-signature","services\u002Fpod-signature",{"title":796,"path":797,"stem":798,"access":12},"policy","\u002Fservices\u002Fpolicy","services\u002Fpolicy",{"title":800,"path":801,"stem":802,"access":12},"portability","\u002Fservices\u002Fportability","services\u002Fportability",{"title":804,"path":805,"stem":806,"access":12},"reduce","\u002Fservices\u002Freduce","services\u002Freduce",{"title":808,"path":809,"stem":810,"access":12},"routing","\u002Fservices\u002Frouting","services\u002Frouting",{"title":812,"path":813,"stem":814,"access":12},"satellites","\u002Fservices\u002Fsatellites","services\u002Fsatellites",{"title":816,"path":817,"stem":818,"access":12},"schema-identifiers","\u002Fservices\u002Fschema-identifiers","services\u002Fschema-identifiers",{"title":820,"path":821,"stem":822,"access":12},"schema-update","\u002Fservices\u002Fschema-update","services\u002Fschema-update",{"title":824,"path":825,"stem":826,"access":12},"sealed-record","\u002Fservices\u002Fsealed-record","services\u002Fsealed-record",{"title":828,"path":829,"stem":830,"access":12},"sealing provider id","\u002Fservices\u002Fsealing-pid-stability","services\u002Fsealing-pid-stability",{"title":832,"path":833,"stem":834,"access":12},"search — full-text","\u002Fservices\u002Fsearch","services\u002Fsearch",{"title":836,"path":837,"stem":838,"access":12},"sequence","\u002Fservices\u002Fsequence","services\u002Fsequence",{"title":840,"path":841,"stem":842,"access":12},"session","\u002Fservices\u002Fsession","services\u002Fsession",{"title":844,"path":845,"stem":846,"access":12},"session-tiers","\u002Fservices\u002Fsession-tiers","services\u002Fsession-tiers",{"title":848,"path":849,"stem":850,"access":12},"shadow","\u002Fservices\u002Fshadow","services\u002Fshadow",{"title":852,"path":853,"stem":854,"access":12},"share-link","\u002Fservices\u002Fshare-link","services\u002Fshare-link",{"title":856,"path":857,"stem":858,"access":12},"snapshots","\u002Fservices\u002Fsnapshots","services\u002Fsnapshots",{"title":860,"path":861,"stem":862,"access":12},"store capabilities","\u002Fservices\u002Fstorage-capability-matrix","services\u002Fstorage-capability-matrix",{"title":864,"path":865,"stem":866,"access":12},"sync","\u002Fservices\u002Fsync","services\u002Fsync",{"title":868,"path":869,"stem":870,"access":12},"team","\u002Fservices\u002Fteam","services\u002Fteam",{"title":872,"path":873,"stem":874,"access":12},"tiers","\u002Fservices\u002Ftiers","services\u002Ftiers",{"title":876,"path":877,"stem":878,"access":12},"transactions","\u002Fservices\u002Ftransactions","services\u002Ftransactions",{"title":880,"path":881,"stem":882,"access":12},"partitions","\u002Fservices\u002Ftransferable-partitions","services\u002Ftransferable-partitions",{"title":884,"path":885,"stem":886,"access":12},"user-envelope","\u002Fservices\u002Fuser-envelope","services\u002Fuser-envelope",{"title":888,"path":889,"stem":890,"access":12,"badge":754},"validation","\u002Fservices\u002Fvalidation","services\u002Fvalidation",{"title":892,"path":893,"stem":894,"access":12},"vault-head","\u002Fservices\u002Fvault-head","services\u002Fvault-head",{"title":896,"path":897,"stem":898,"access":12},"via","\u002Fservices\u002Fvia","services\u002Fvia",{"title":900,"path":901,"stem":902,"access":12},"withdrawal","\u002Fservices\u002Fwithdrawal","services\u002Fwithdrawal",{"title":904,"path":905,"stem":906,"children":907},"Start","\u002Fstart","start",[908,911,915,919,923],{"title":10,"path":905,"stem":909,"access":12,"icon":910},"start\u002Findex","i-lucide-flag",{"title":912,"path":913,"stem":914,"access":12},"Install","\u002Fstart\u002Finstall","start\u002F1.install",{"title":916,"path":917,"stem":918,"access":12},"Your first vault","\u002Fstart\u002Ffirst-vault","start\u002F2.first-vault",{"title":920,"path":921,"stem":922,"access":12},"Your first service","\u002Fstart\u002Ffirst-service","start\u002F3.first-service",{"title":924,"path":925,"stem":926,"access":12},"See the ciphertext","\u002Fstart\u002Fsee-the-ciphertext","start\u002F4.see-the-ciphertext",{"id":928,"title":515,"access":12,"apiToc":929,"body":930,"category":4169,"description":4170,"extension":4171,"meta":4172,"navigation":4169,"nest":4169,"path":516,"seo":4173,"sinceVersion":4169,"status":4174,"stem":517,"subtitle":4169,"tier":4175,"tocExternal":4169,"__hash__":4176},"docs\u002Frecipes\u002Fattestation-verifier.md",false,{"type":931,"value":932,"toc":4158},"minimark",[933,937,965,978,993,996,1036,1041,1060,1721,1724,1765,1772,1782,1786,1796,1969,1975,1979,2001,3147,3150,3229,3233,3236,3392,3583,3589,3652,3656,3663,3705,3808,3814,3864,3881,3884,3887,4028,4032,4058,4062,4129,4133,4154],[934,935,515],"h1",{"id":936},"attestation-verifier",[938,939,940],"blockquote",{},[941,942,943,947,948,951,952,956,957,960,961,964],"p",{},[944,945,946],"strong",{},"Audience:"," issuers of printed or forwarded documents (invoices, certificates, receipts) who want holders to verify authenticity fully offline — no server contacted, no document contents ever transmitted.\n",[944,949,950],{},"Bundle:"," core + ",[953,954,955],"code",{},"withAttestation()"," (issuer side, ",[953,958,959],{},"@noy-db\u002Fhub\u002Fattestation",") — the offline verifier itself uses the separate zero-dependency ",[953,962,963],{},"@noy-db\u002Fattestation"," package, no vault required.",[941,966,967,968,977],{},"Verified by: ",[969,970,974],"a",{"href":971,"rel":972},"https:\u002F\u002Fgithub.com\u002Fnoy-db\u002Fdocs\u002Fblob\u002Fmain\u002Fshowcases\u002Fsrc\u002Frecipe-attestation-verifier.recipe.test.ts",[973],"nofollow",[953,975,976],{},"showcases\u002Fsrc\u002Frecipe-attestation-verifier.recipe.test.ts"," — the runnable form of this recipe.",[941,979,980,981,984,985,988,989,992],{},"This recipe verifies that a printed or forwarded document — an invoice, a\ncertificate, a receipt — is ",[944,982,983],{},"authentic and unaltered, fully offline",": no\nserver is contacted during verification, and no server ever holds or returns\nthe document's contents. The issuing firm keeps its records in a noy-db\n",[944,986,987],{},"vault"," — an end-to-end-encrypted document store (see\n",[969,990,991],{"href":48},"Vaults & collections",") — and mints a signed,\nper-field commitment that travels inside a QR code on the document itself.\nAnyone holding the paper recomputes the commitment from the values they can\nread off it and checks the firm's Ed25519 signature against a public key\nbundled into the verifier — a single static HTML page with no backend.",[941,994,995],{},"Three parties are involved, and only the first one runs noy-db:",[997,998,999,1017,1027],"ol",{},[1000,1001,1002,1005,1006,1009,1010,1013,1014,1016],"li",{},[944,1003,1004],{},"The firm (issuer)"," — opens its vault, declares which fields of a record\nare attested, and calls ",[953,1007,1008],{},"vault.issueAttestation()",". This is the\n",[969,1011,1012],{"href":610},"attestation service",", enabled with\n",[953,1015,955],{},".",[1000,1018,1019,1022,1023,1026],{},[944,1020,1021],{},"The document"," — carries the QR. The QR contains ",[944,1024,1025],{},"no field values",",\nonly salted hashes of them plus the signature: holding the QR alone\nreveals nothing.",[1000,1028,1029,1032,1033,1035],{},[944,1030,1031],{},"The verifier (third party)"," — a static page or script that imports only\n",[953,1034,963],{},", a pure, zero-dependency package that runs in Node\nand the browser. No vault, no keys to protect, no network.",[1037,1038,1040],"h2",{"id":1039},"issue-a-signed-qr-firm-side","Issue a signed QR (firm side)",[941,1042,1043,1044,1046,1047,1050,1051,1054,1055,1059],{},"The firm declares an ",[953,1045,609],{}," field schema on the collection: which\nrecord fields are committed, and how each value is normalized before hashing\n(so ",[953,1048,1049],{},"\"1,234.50\""," typed by a human later matches the stored number ",[953,1052,1053],{},"1234.5"," —\nsee ",[969,1056,1058],{"href":1057},"#field-normalizers","Field normalizers",").",[1061,1062,1067],"pre",{"className":1063,"code":1064,"language":1065,"meta":1066,"style":1066},"language-ts shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { createNoydb } from '@noy-db\u002Fhub'\nimport { withAttestation } from '@noy-db\u002Fhub\u002Fattestation'\n\ninterface Invoice { id: string; invoiceNo: string; total: number; issueDate: string }\n\nconst attestation = {\n  fields: [\n    { path: 'invoiceNo', normalize: 'alnum-upper' as const },\n    { path: 'total',     normalize: 'cents'       as const },\n    { path: 'issueDate', normalize: 'iso-date'    as const },\n  ],\n}\n\nconst db = await createNoydb({\n  user: 'firm',                            \u002F\u002F omitting `store` uses the built-in in-memory store;\n  secret: 'firm-secret-2026',          \u002F\u002F pass to-file \u002F to-postgres \u002F … in production\n  attestationStrategy: withAttestation(),  \u002F\u002F opt-in: attestation stays out of the bundle otherwise\n})\nconst vault = await db.openVault('books')\n\nconst invoices = vault.collection\u003CInvoice>('invoices', { attestation })\nawait invoices.put('inv-1', {\n  id: 'inv-1', invoiceNo: 'INV-1042', total: 1234.5, issueDate: '2026-05-29',\n})\n\nconst { docId, qr, keyId } = await vault.issueAttestation('invoices', 'inv-1')\n\u002F\u002F → docId : '01JZK7Y1Q2M4N8R3T5V7X9ZABC'  — fresh 26-char id of THIS attestation (used for revocation)\n\u002F\u002F → qr    : 'eyJ2IjoxLCJkb2NJZCI6...'     — base64url payload; render it as a QR on the document\n\u002F\u002F → keyId : 'bd7e8268071ac41f'            — which signing key produced the signature\n\nconst { publicKeyB64 } = await vault.getDocumentSigningPublicKey()\n\u002F\u002F → { keyId: 'bd7e8268071ac41f', publicKeyB64: 'hpbs5UQivCLgPolFRoj5h1Q12OCXFlZkZfff-mEiAPM' }\n","ts","",[953,1068,1069,1102,1122,1129,1184,1189,1204,1215,1258,1295,1331,1340,1346,1351,1373,1394,1414,1432,1441,1472,1477,1523,1550,1602,1609,1614,1666,1672,1678,1684,1689,1715],{"__ignoreMap":1066},[1070,1071,1074,1078,1082,1086,1089,1092,1095,1099],"span",{"class":1072,"line":1073},"line",1,[1070,1075,1077],{"class":1076},"s7zQu","import",[1070,1079,1081],{"class":1080},"sMK4o"," {",[1070,1083,1085],{"class":1084},"sTEyZ"," createNoydb",[1070,1087,1088],{"class":1080}," }",[1070,1090,1091],{"class":1076}," from",[1070,1093,1094],{"class":1080}," '",[1070,1096,1098],{"class":1097},"sfazB","@noy-db\u002Fhub",[1070,1100,1101],{"class":1080},"'\n",[1070,1103,1105,1107,1109,1112,1114,1116,1118,1120],{"class":1072,"line":1104},2,[1070,1106,1077],{"class":1076},[1070,1108,1081],{"class":1080},[1070,1110,1111],{"class":1084}," withAttestation",[1070,1113,1088],{"class":1080},[1070,1115,1091],{"class":1076},[1070,1117,1094],{"class":1080},[1070,1119,959],{"class":1097},[1070,1121,1101],{"class":1080},[1070,1123,1125],{"class":1072,"line":1124},3,[1070,1126,1128],{"emptyLinePlaceholder":1127},true,"\n",[1070,1130,1132,1136,1140,1142,1146,1149,1152,1155,1158,1160,1162,1164,1167,1169,1172,1174,1177,1179,1181],{"class":1072,"line":1131},4,[1070,1133,1135],{"class":1134},"spNyl","interface",[1070,1137,1139],{"class":1138},"sBMFI"," Invoice",[1070,1141,1081],{"class":1080},[1070,1143,1145],{"class":1144},"swJcz"," id",[1070,1147,1148],{"class":1080},":",[1070,1150,1151],{"class":1138}," string",[1070,1153,1154],{"class":1080},";",[1070,1156,1157],{"class":1144}," invoiceNo",[1070,1159,1148],{"class":1080},[1070,1161,1151],{"class":1138},[1070,1163,1154],{"class":1080},[1070,1165,1166],{"class":1144}," total",[1070,1168,1148],{"class":1080},[1070,1170,1171],{"class":1138}," number",[1070,1173,1154],{"class":1080},[1070,1175,1176],{"class":1144}," issueDate",[1070,1178,1148],{"class":1080},[1070,1180,1151],{"class":1138},[1070,1182,1183],{"class":1080}," }\n",[1070,1185,1187],{"class":1072,"line":1186},5,[1070,1188,1128],{"emptyLinePlaceholder":1127},[1070,1190,1192,1195,1198,1201],{"class":1072,"line":1191},6,[1070,1193,1194],{"class":1134},"const",[1070,1196,1197],{"class":1084}," attestation ",[1070,1199,1200],{"class":1080},"=",[1070,1202,1203],{"class":1080}," {\n",[1070,1205,1207,1210,1212],{"class":1072,"line":1206},7,[1070,1208,1209],{"class":1144},"  fields",[1070,1211,1148],{"class":1080},[1070,1213,1214],{"class":1084}," [\n",[1070,1216,1218,1221,1224,1226,1228,1231,1234,1237,1240,1242,1244,1247,1249,1252,1255],{"class":1072,"line":1217},8,[1070,1219,1220],{"class":1080},"    {",[1070,1222,1223],{"class":1144}," path",[1070,1225,1148],{"class":1080},[1070,1227,1094],{"class":1080},[1070,1229,1230],{"class":1097},"invoiceNo",[1070,1232,1233],{"class":1080},"'",[1070,1235,1236],{"class":1080},",",[1070,1238,1239],{"class":1144}," normalize",[1070,1241,1148],{"class":1080},[1070,1243,1094],{"class":1080},[1070,1245,1246],{"class":1097},"alnum-upper",[1070,1248,1233],{"class":1080},[1070,1250,1251],{"class":1076}," as",[1070,1253,1254],{"class":1134}," const",[1070,1256,1257],{"class":1080}," },\n",[1070,1259,1261,1263,1265,1267,1269,1272,1274,1276,1279,1281,1283,1286,1288,1291,1293],{"class":1072,"line":1260},9,[1070,1262,1220],{"class":1080},[1070,1264,1223],{"class":1144},[1070,1266,1148],{"class":1080},[1070,1268,1094],{"class":1080},[1070,1270,1271],{"class":1097},"total",[1070,1273,1233],{"class":1080},[1070,1275,1236],{"class":1080},[1070,1277,1278],{"class":1144},"     normalize",[1070,1280,1148],{"class":1080},[1070,1282,1094],{"class":1080},[1070,1284,1285],{"class":1097},"cents",[1070,1287,1233],{"class":1080},[1070,1289,1290],{"class":1076},"       as",[1070,1292,1254],{"class":1134},[1070,1294,1257],{"class":1080},[1070,1296,1298,1300,1302,1304,1306,1309,1311,1313,1315,1317,1319,1322,1324,1327,1329],{"class":1072,"line":1297},10,[1070,1299,1220],{"class":1080},[1070,1301,1223],{"class":1144},[1070,1303,1148],{"class":1080},[1070,1305,1094],{"class":1080},[1070,1307,1308],{"class":1097},"issueDate",[1070,1310,1233],{"class":1080},[1070,1312,1236],{"class":1080},[1070,1314,1239],{"class":1144},[1070,1316,1148],{"class":1080},[1070,1318,1094],{"class":1080},[1070,1320,1321],{"class":1097},"iso-date",[1070,1323,1233],{"class":1080},[1070,1325,1326],{"class":1076},"    as",[1070,1328,1254],{"class":1134},[1070,1330,1257],{"class":1080},[1070,1332,1334,1337],{"class":1072,"line":1333},11,[1070,1335,1336],{"class":1084},"  ]",[1070,1338,1339],{"class":1080},",\n",[1070,1341,1343],{"class":1072,"line":1342},12,[1070,1344,1345],{"class":1080},"}\n",[1070,1347,1349],{"class":1072,"line":1348},13,[1070,1350,1128],{"emptyLinePlaceholder":1127},[1070,1352,1354,1356,1359,1361,1364,1367,1370],{"class":1072,"line":1353},14,[1070,1355,1194],{"class":1134},[1070,1357,1358],{"class":1084}," db ",[1070,1360,1200],{"class":1080},[1070,1362,1363],{"class":1076}," await",[1070,1365,1085],{"class":1366},"s2Zo4",[1070,1368,1369],{"class":1084},"(",[1070,1371,1372],{"class":1080},"{\n",[1070,1374,1376,1379,1381,1383,1386,1388,1390],{"class":1072,"line":1375},15,[1070,1377,1378],{"class":1144},"  user",[1070,1380,1148],{"class":1080},[1070,1382,1094],{"class":1080},[1070,1384,1385],{"class":1097},"firm",[1070,1387,1233],{"class":1080},[1070,1389,1236],{"class":1080},[1070,1391,1393],{"class":1392},"sHwdD","                            \u002F\u002F omitting `store` uses the built-in in-memory store;\n",[1070,1395,1397,1400,1402,1404,1407,1409,1411],{"class":1072,"line":1396},16,[1070,1398,1399],{"class":1144},"  secret",[1070,1401,1148],{"class":1080},[1070,1403,1094],{"class":1080},[1070,1405,1406],{"class":1097},"firm-secret-2026",[1070,1408,1233],{"class":1080},[1070,1410,1236],{"class":1080},[1070,1412,1413],{"class":1392},"          \u002F\u002F pass to-file \u002F to-postgres \u002F … in production\n",[1070,1415,1417,1420,1422,1424,1427,1429],{"class":1072,"line":1416},17,[1070,1418,1419],{"class":1144},"  attestationStrategy",[1070,1421,1148],{"class":1080},[1070,1423,1111],{"class":1366},[1070,1425,1426],{"class":1084},"()",[1070,1428,1236],{"class":1080},[1070,1430,1431],{"class":1392},"  \u002F\u002F opt-in: attestation stays out of the bundle otherwise\n",[1070,1433,1435,1438],{"class":1072,"line":1434},18,[1070,1436,1437],{"class":1080},"}",[1070,1439,1440],{"class":1084},")\n",[1070,1442,1444,1446,1449,1451,1453,1456,1458,1461,1463,1465,1468,1470],{"class":1072,"line":1443},19,[1070,1445,1194],{"class":1134},[1070,1447,1448],{"class":1084}," vault ",[1070,1450,1200],{"class":1080},[1070,1452,1363],{"class":1076},[1070,1454,1455],{"class":1084}," db",[1070,1457,1016],{"class":1080},[1070,1459,1460],{"class":1366},"openVault",[1070,1462,1369],{"class":1084},[1070,1464,1233],{"class":1080},[1070,1466,1467],{"class":1097},"books",[1070,1469,1233],{"class":1080},[1070,1471,1440],{"class":1084},[1070,1473,1475],{"class":1072,"line":1474},20,[1070,1476,1128],{"emptyLinePlaceholder":1127},[1070,1478,1480,1482,1485,1487,1490,1492,1495,1498,1501,1504,1506,1508,1511,1513,1515,1517,1519,1521],{"class":1072,"line":1479},21,[1070,1481,1194],{"class":1134},[1070,1483,1484],{"class":1084}," invoices ",[1070,1486,1200],{"class":1080},[1070,1488,1489],{"class":1084}," vault",[1070,1491,1016],{"class":1080},[1070,1493,1494],{"class":1366},"collection",[1070,1496,1497],{"class":1080},"\u003C",[1070,1499,1500],{"class":1138},"Invoice",[1070,1502,1503],{"class":1080},">",[1070,1505,1369],{"class":1084},[1070,1507,1233],{"class":1080},[1070,1509,1510],{"class":1097},"invoices",[1070,1512,1233],{"class":1080},[1070,1514,1236],{"class":1080},[1070,1516,1081],{"class":1080},[1070,1518,1197],{"class":1084},[1070,1520,1437],{"class":1080},[1070,1522,1440],{"class":1084},[1070,1524,1526,1529,1532,1534,1537,1539,1541,1544,1546,1548],{"class":1072,"line":1525},22,[1070,1527,1528],{"class":1076},"await",[1070,1530,1531],{"class":1084}," invoices",[1070,1533,1016],{"class":1080},[1070,1535,1536],{"class":1366},"put",[1070,1538,1369],{"class":1084},[1070,1540,1233],{"class":1080},[1070,1542,1543],{"class":1097},"inv-1",[1070,1545,1233],{"class":1080},[1070,1547,1236],{"class":1080},[1070,1549,1203],{"class":1080},[1070,1551,1553,1556,1558,1560,1562,1564,1566,1568,1570,1572,1575,1577,1579,1581,1583,1587,1589,1591,1593,1595,1598,1600],{"class":1072,"line":1552},23,[1070,1554,1555],{"class":1144},"  id",[1070,1557,1148],{"class":1080},[1070,1559,1094],{"class":1080},[1070,1561,1543],{"class":1097},[1070,1563,1233],{"class":1080},[1070,1565,1236],{"class":1080},[1070,1567,1157],{"class":1144},[1070,1569,1148],{"class":1080},[1070,1571,1094],{"class":1080},[1070,1573,1574],{"class":1097},"INV-1042",[1070,1576,1233],{"class":1080},[1070,1578,1236],{"class":1080},[1070,1580,1166],{"class":1144},[1070,1582,1148],{"class":1080},[1070,1584,1586],{"class":1585},"sbssI"," 1234.5",[1070,1588,1236],{"class":1080},[1070,1590,1176],{"class":1144},[1070,1592,1148],{"class":1080},[1070,1594,1094],{"class":1080},[1070,1596,1597],{"class":1097},"2026-05-29",[1070,1599,1233],{"class":1080},[1070,1601,1339],{"class":1080},[1070,1603,1605,1607],{"class":1072,"line":1604},24,[1070,1606,1437],{"class":1080},[1070,1608,1440],{"class":1084},[1070,1610,1612],{"class":1072,"line":1611},25,[1070,1613,1128],{"emptyLinePlaceholder":1127},[1070,1615,1617,1619,1621,1624,1626,1629,1631,1634,1636,1639,1641,1643,1645,1648,1650,1652,1654,1656,1658,1660,1662,1664],{"class":1072,"line":1616},26,[1070,1618,1194],{"class":1134},[1070,1620,1081],{"class":1080},[1070,1622,1623],{"class":1084}," docId",[1070,1625,1236],{"class":1080},[1070,1627,1628],{"class":1084}," qr",[1070,1630,1236],{"class":1080},[1070,1632,1633],{"class":1084}," keyId ",[1070,1635,1437],{"class":1080},[1070,1637,1638],{"class":1080}," =",[1070,1640,1363],{"class":1076},[1070,1642,1489],{"class":1084},[1070,1644,1016],{"class":1080},[1070,1646,1647],{"class":1366},"issueAttestation",[1070,1649,1369],{"class":1084},[1070,1651,1233],{"class":1080},[1070,1653,1510],{"class":1097},[1070,1655,1233],{"class":1080},[1070,1657,1236],{"class":1080},[1070,1659,1094],{"class":1080},[1070,1661,1543],{"class":1097},[1070,1663,1233],{"class":1080},[1070,1665,1440],{"class":1084},[1070,1667,1669],{"class":1072,"line":1668},27,[1070,1670,1671],{"class":1392},"\u002F\u002F → docId : '01JZK7Y1Q2M4N8R3T5V7X9ZABC'  — fresh 26-char id of THIS attestation (used for revocation)\n",[1070,1673,1675],{"class":1072,"line":1674},28,[1070,1676,1677],{"class":1392},"\u002F\u002F → qr    : 'eyJ2IjoxLCJkb2NJZCI6...'     — base64url payload; render it as a QR on the document\n",[1070,1679,1681],{"class":1072,"line":1680},29,[1070,1682,1683],{"class":1392},"\u002F\u002F → keyId : 'bd7e8268071ac41f'            — which signing key produced the signature\n",[1070,1685,1687],{"class":1072,"line":1686},30,[1070,1688,1128],{"emptyLinePlaceholder":1127},[1070,1690,1692,1694,1696,1699,1701,1703,1705,1707,1709,1712],{"class":1072,"line":1691},31,[1070,1693,1194],{"class":1134},[1070,1695,1081],{"class":1080},[1070,1697,1698],{"class":1084}," publicKeyB64 ",[1070,1700,1437],{"class":1080},[1070,1702,1638],{"class":1080},[1070,1704,1363],{"class":1076},[1070,1706,1489],{"class":1084},[1070,1708,1016],{"class":1080},[1070,1710,1711],{"class":1366},"getDocumentSigningPublicKey",[1070,1713,1714],{"class":1084},"()\n",[1070,1716,1718],{"class":1072,"line":1717},32,[1070,1719,1720],{"class":1392},"\u002F\u002F → { keyId: 'bd7e8268071ac41f', publicKeyB64: 'hpbs5UQivCLgPolFRoj5h1Q12OCXFlZkZfff-mEiAPM' }\n",[941,1722,1723],{},"Two rules the hub enforces on this side:",[1725,1726,1727,1750],"ul",{},[1000,1728,1729,1736,1737,1739,1740,1742,1743,1746,1747,1016],{},[944,1730,1731,1732,1735],{},"Only the ",[953,1733,1734],{},"owner"," role can issue."," ",[953,1738,1647],{}," and the first\n(key-minting) call to ",[953,1741,1711],{}," throw\n",[953,1744,1745],{},"AttestationError"," for any other role — signing is the firm's identity\noperation. Once minted, the signing key is stable: every later issuance\nreuses the same ",[953,1748,1749],{},"keyId",[1000,1751,1752,1755,1756,1758,1759,1762,1763,1016],{},[944,1753,1754],{},"The collection must declare the schema."," Calling ",[953,1757,1647],{}," on a\ncollection created without ",[953,1760,1761],{},"{ attestation }"," throws ",[953,1764,1745],{},[941,1766,1767,1768,1771],{},"The values are hashed from the ",[944,1769,1770],{},"canonical stored record"," (independent of any\ndisplay locale), each issuance uses a fresh random salt, and an encrypted\nindex entry is kept in the vault so the firm can revoke later.",[941,1773,1774,1775,1778,1779,1016],{},"To render the QR into a generated PDF server-side, see the companion recipe\n",[969,1776,1777],{"href":520},"AWS-KMS PDF attestation"," — it is the\ngeneration side only and is ",[944,1780,1781],{},"not required to verify",[1037,1783,1785],{"id":1784},"what-travels-in-the-qr","What travels in the QR",[941,1787,1788,1789,1792,1793,1148],{},"The ",[953,1790,1791],{},"qr"," string is base64url-encoded JSON. Decoded with ",[953,1794,1795],{},"decodeQr()",[1061,1797,1800],{"className":1798,"code":1799,"language":141,"meta":1066,"style":1066},"language-json shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\n  \"v\": 1,\n  \"docId\": \"01JZK7Y1Q2M4N8R3T5V7X9ZABC\",\n  \"salt\": \"fjFzQREHeuT_sow-L2GkgA\",\n  \"alg\": \"ed25519\",\n  \"keyId\": \"bd7e8268071ac41f\",\n  \"fieldHashes\": [\"WsR5Ol9nkUCpjbDNn47Z5mMAaM1…\", \"PUOQQylsmF2G1m069L8ojsFv8iQ…\", \"hBUvDo8iEFc8HPDzdmMoxJF18lD…\"],\n  \"sig\": \"0ghYQP_bd5O6qDth33-Xz08Q7_JbL96zX4HfVPKLYP8t…\"\n}\n",[953,1801,1802,1806,1824,1845,1865,1885,1904,1946,1965],{"__ignoreMap":1066},[1070,1803,1804],{"class":1072,"line":1073},[1070,1805,1372],{"class":1080},[1070,1807,1808,1811,1814,1817,1819,1822],{"class":1072,"line":1104},[1070,1809,1810],{"class":1080},"  \"",[1070,1812,1813],{"class":1134},"v",[1070,1815,1816],{"class":1080},"\"",[1070,1818,1148],{"class":1080},[1070,1820,1821],{"class":1585}," 1",[1070,1823,1339],{"class":1080},[1070,1825,1826,1828,1831,1833,1835,1838,1841,1843],{"class":1072,"line":1124},[1070,1827,1810],{"class":1080},[1070,1829,1830],{"class":1134},"docId",[1070,1832,1816],{"class":1080},[1070,1834,1148],{"class":1080},[1070,1836,1837],{"class":1080}," \"",[1070,1839,1840],{"class":1097},"01JZK7Y1Q2M4N8R3T5V7X9ZABC",[1070,1842,1816],{"class":1080},[1070,1844,1339],{"class":1080},[1070,1846,1847,1849,1852,1854,1856,1858,1861,1863],{"class":1072,"line":1131},[1070,1848,1810],{"class":1080},[1070,1850,1851],{"class":1134},"salt",[1070,1853,1816],{"class":1080},[1070,1855,1148],{"class":1080},[1070,1857,1837],{"class":1080},[1070,1859,1860],{"class":1097},"fjFzQREHeuT_sow-L2GkgA",[1070,1862,1816],{"class":1080},[1070,1864,1339],{"class":1080},[1070,1866,1867,1869,1872,1874,1876,1878,1881,1883],{"class":1072,"line":1186},[1070,1868,1810],{"class":1080},[1070,1870,1871],{"class":1134},"alg",[1070,1873,1816],{"class":1080},[1070,1875,1148],{"class":1080},[1070,1877,1837],{"class":1080},[1070,1879,1880],{"class":1097},"ed25519",[1070,1882,1816],{"class":1080},[1070,1884,1339],{"class":1080},[1070,1886,1887,1889,1891,1893,1895,1897,1900,1902],{"class":1072,"line":1191},[1070,1888,1810],{"class":1080},[1070,1890,1749],{"class":1134},[1070,1892,1816],{"class":1080},[1070,1894,1148],{"class":1080},[1070,1896,1837],{"class":1080},[1070,1898,1899],{"class":1097},"bd7e8268071ac41f",[1070,1901,1816],{"class":1080},[1070,1903,1339],{"class":1080},[1070,1905,1906,1908,1911,1913,1915,1918,1920,1923,1925,1927,1929,1932,1934,1936,1938,1941,1943],{"class":1072,"line":1206},[1070,1907,1810],{"class":1080},[1070,1909,1910],{"class":1134},"fieldHashes",[1070,1912,1816],{"class":1080},[1070,1914,1148],{"class":1080},[1070,1916,1917],{"class":1080}," [",[1070,1919,1816],{"class":1080},[1070,1921,1922],{"class":1097},"WsR5Ol9nkUCpjbDNn47Z5mMAaM1…",[1070,1924,1816],{"class":1080},[1070,1926,1236],{"class":1080},[1070,1928,1837],{"class":1080},[1070,1930,1931],{"class":1097},"PUOQQylsmF2G1m069L8ojsFv8iQ…",[1070,1933,1816],{"class":1080},[1070,1935,1236],{"class":1080},[1070,1937,1837],{"class":1080},[1070,1939,1940],{"class":1097},"hBUvDo8iEFc8HPDzdmMoxJF18lD…",[1070,1942,1816],{"class":1080},[1070,1944,1945],{"class":1080},"],\n",[1070,1947,1948,1950,1953,1955,1957,1959,1962],{"class":1072,"line":1217},[1070,1949,1810],{"class":1080},[1070,1951,1952],{"class":1134},"sig",[1070,1954,1816],{"class":1080},[1070,1956,1148],{"class":1080},[1070,1958,1837],{"class":1080},[1070,1960,1961],{"class":1097},"0ghYQP_bd5O6qDth33-Xz08Q7_JbL96zX4HfVPKLYP8t…",[1070,1963,1964],{"class":1080},"\"\n",[1070,1966,1967],{"class":1072,"line":1260},[1070,1968,1345],{"class":1080},[941,1970,1971,1972,1016],{},"One SHA-256 hash per schema field, in schema order — never the values\nthemselves. Each hash covers the per-document salt, the field path, and the\nnormalized value, so a low-entropy value cannot be brute-forced across\ndocuments and two fields sharing a value still hash differently. The\nsignature covers ",[953,1973,1974],{},"{v, docId, salt, keyId, fieldHashes}",[1037,1976,1978],{"id":1977},"the-offline-verifier","The offline verifier",[941,1980,1981,1982,1984,1985,1988,1989,1992,1993,1996,1997,2000],{},"The verify side composes three functions from ",[953,1983,963],{}," —\n",[953,1986,1987],{},"decodeQr",", ",[953,1990,1991],{},"verifyAttestation",", and ",[953,1994,1995],{},"verifyRevocationList"," — into a single\n",[953,1998,1999],{},"verifyDocument()"," that always returns one of six verdicts instead of\nthrowing on bad input. This is the complete verifier core:",[1061,2002,2004],{"className":1063,"code":2003,"language":1065,"meta":1066,"style":1066},"import {\n  decodeQr, verifyAttestation, verifyRevocationList,\n  type AttestationFieldSchema, type QrPayload, type RevocationList,\n} from '@noy-db\u002Fattestation'\n\nexport interface VerifierConfig {\n  publicKeys: Record\u003Cstring, string>   \u002F\u002F keyId → publicKeyB64, bundled at build time\n  fieldSchema: AttestationFieldSchema  \u002F\u002F same schema the firm declared\n  revocationList?: RevocationList      \u002F\u002F optional, signed by the firm\n}\n\nexport type VerifierOutcome =\n  | 'authentic-valid'\n  | 'authentic-revoked'\n  | 'altered'\n  | 'signature-invalid'\n  | 'unknown-key'\n  | 'unreadable-qr'\n\nexport interface Verdict {\n  outcome: VerifierOutcome\n  perField: Array\u003C{ path: string; match: boolean }>\n  revocationTrusted: boolean | null    \u002F\u002F null: no list · false: list failed its own signature\n  keyId?: string\n  docId?: string\n}\n\nexport async function verifyDocument(\n  qr: string,\n  claimedFields: Record\u003Cstring, unknown>,\n  config: VerifierConfig,\n): Promise\u003CVerdict> {\n  let payload: QrPayload\n  try {\n    payload = decodeQr(qr)\n  } catch {\n    return { outcome: 'unreadable-qr', perField: [], revocationTrusted: null }\n  }\n\n  const matchedKey = config.publicKeys[payload.keyId]\n  if (matchedKey === undefined) {\n    return { outcome: 'unknown-key', perField: [], revocationTrusted: null, keyId: payload.keyId, docId: payload.docId }\n  }\n\n  \u002F\u002F The revocation list is untrusted input (often network-fetched): verify its\n  \u002F\u002F OWN signature first, and only honor it if that check passes.\n  let revocationTrusted: boolean | null = null\n  if (config.revocationList) {\n    revocationTrusted = await verifyRevocationList(config.revocationList, matchedKey)\n  }\n\n  const result = await verifyAttestation({\n    qr,\n    claimedFields,\n    fieldSchema: config.fieldSchema,\n    publicKeys: config.publicKeys,\n    ...(revocationTrusted === true && config.revocationList ? { revocation: { list: config.revocationList } } : {}),\n  })\n\n  const perField = result.perField.map((f) => ({ path: f.path, match: f.match }))\n  const allMatch = perField.length > 0 && perField.every((f) => f.match)\n\n  let outcome: VerifierOutcome\n  if (!result.signatureValid) outcome = 'signature-invalid'\n  else if (!allMatch) outcome = 'altered'\n  else if (result.revoked === true) outcome = 'authentic-revoked'\n  else outcome = 'authentic-valid'\n\n  return { outcome, perField, revocationTrusted, keyId: payload.keyId, docId: payload.docId }\n}\n",[953,2005,2006,2012,2029,2054,2066,2070,2083,2107,2119,2132,2136,2140,2152,2164,2175,2186,2197,2208,2219,2223,2234,2244,2276,2294,2304,2313,2317,2321,2337,2349,2370,2381,2398,2412,2420,2437,2448,2488,2494,2499,2531,2554,2613,2618,2623,2629,2635,2655,2674,2700,2705,2710,2728,2736,2744,2761,2777,2841,2848,2853,2921,2971,2976,2987,3018,3046,3078,3093,3098,3142],{"__ignoreMap":1066},[1070,2007,2008,2010],{"class":1072,"line":1073},[1070,2009,1077],{"class":1076},[1070,2011,1203],{"class":1080},[1070,2013,2014,2017,2019,2022,2024,2027],{"class":1072,"line":1104},[1070,2015,2016],{"class":1084},"  decodeQr",[1070,2018,1236],{"class":1080},[1070,2020,2021],{"class":1084}," verifyAttestation",[1070,2023,1236],{"class":1080},[1070,2025,2026],{"class":1084}," verifyRevocationList",[1070,2028,1339],{"class":1080},[1070,2030,2031,2034,2037,2039,2042,2045,2047,2049,2052],{"class":1072,"line":1124},[1070,2032,2033],{"class":1076},"  type",[1070,2035,2036],{"class":1084}," AttestationFieldSchema",[1070,2038,1236],{"class":1080},[1070,2040,2041],{"class":1076}," type",[1070,2043,2044],{"class":1084}," QrPayload",[1070,2046,1236],{"class":1080},[1070,2048,2041],{"class":1076},[1070,2050,2051],{"class":1084}," RevocationList",[1070,2053,1339],{"class":1080},[1070,2055,2056,2058,2060,2062,2064],{"class":1072,"line":1131},[1070,2057,1437],{"class":1080},[1070,2059,1091],{"class":1076},[1070,2061,1094],{"class":1080},[1070,2063,963],{"class":1097},[1070,2065,1101],{"class":1080},[1070,2067,2068],{"class":1072,"line":1186},[1070,2069,1128],{"emptyLinePlaceholder":1127},[1070,2071,2072,2075,2078,2081],{"class":1072,"line":1191},[1070,2073,2074],{"class":1076},"export",[1070,2076,2077],{"class":1134}," interface",[1070,2079,2080],{"class":1138}," VerifierConfig",[1070,2082,1203],{"class":1080},[1070,2084,2085,2088,2090,2093,2095,2098,2100,2102,2104],{"class":1072,"line":1206},[1070,2086,2087],{"class":1144},"  publicKeys",[1070,2089,1148],{"class":1080},[1070,2091,2092],{"class":1138}," Record",[1070,2094,1497],{"class":1080},[1070,2096,2097],{"class":1138},"string",[1070,2099,1236],{"class":1080},[1070,2101,1151],{"class":1138},[1070,2103,1503],{"class":1080},[1070,2105,2106],{"class":1392},"   \u002F\u002F keyId → publicKeyB64, bundled at build time\n",[1070,2108,2109,2112,2114,2116],{"class":1072,"line":1217},[1070,2110,2111],{"class":1144},"  fieldSchema",[1070,2113,1148],{"class":1080},[1070,2115,2036],{"class":1138},[1070,2117,2118],{"class":1392},"  \u002F\u002F same schema the firm declared\n",[1070,2120,2121,2124,2127,2129],{"class":1072,"line":1260},[1070,2122,2123],{"class":1144},"  revocationList",[1070,2125,2126],{"class":1080},"?:",[1070,2128,2051],{"class":1138},[1070,2130,2131],{"class":1392},"      \u002F\u002F optional, signed by the firm\n",[1070,2133,2134],{"class":1072,"line":1297},[1070,2135,1345],{"class":1080},[1070,2137,2138],{"class":1072,"line":1333},[1070,2139,1128],{"emptyLinePlaceholder":1127},[1070,2141,2142,2144,2146,2149],{"class":1072,"line":1342},[1070,2143,2074],{"class":1076},[1070,2145,2041],{"class":1134},[1070,2147,2148],{"class":1138}," VerifierOutcome",[1070,2150,2151],{"class":1080}," =\n",[1070,2153,2154,2157,2159,2162],{"class":1072,"line":1348},[1070,2155,2156],{"class":1080},"  |",[1070,2158,1094],{"class":1080},[1070,2160,2161],{"class":1097},"authentic-valid",[1070,2163,1101],{"class":1080},[1070,2165,2166,2168,2170,2173],{"class":1072,"line":1353},[1070,2167,2156],{"class":1080},[1070,2169,1094],{"class":1080},[1070,2171,2172],{"class":1097},"authentic-revoked",[1070,2174,1101],{"class":1080},[1070,2176,2177,2179,2181,2184],{"class":1072,"line":1375},[1070,2178,2156],{"class":1080},[1070,2180,1094],{"class":1080},[1070,2182,2183],{"class":1097},"altered",[1070,2185,1101],{"class":1080},[1070,2187,2188,2190,2192,2195],{"class":1072,"line":1396},[1070,2189,2156],{"class":1080},[1070,2191,1094],{"class":1080},[1070,2193,2194],{"class":1097},"signature-invalid",[1070,2196,1101],{"class":1080},[1070,2198,2199,2201,2203,2206],{"class":1072,"line":1416},[1070,2200,2156],{"class":1080},[1070,2202,1094],{"class":1080},[1070,2204,2205],{"class":1097},"unknown-key",[1070,2207,1101],{"class":1080},[1070,2209,2210,2212,2214,2217],{"class":1072,"line":1434},[1070,2211,2156],{"class":1080},[1070,2213,1094],{"class":1080},[1070,2215,2216],{"class":1097},"unreadable-qr",[1070,2218,1101],{"class":1080},[1070,2220,2221],{"class":1072,"line":1443},[1070,2222,1128],{"emptyLinePlaceholder":1127},[1070,2224,2225,2227,2229,2232],{"class":1072,"line":1474},[1070,2226,2074],{"class":1076},[1070,2228,2077],{"class":1134},[1070,2230,2231],{"class":1138}," Verdict",[1070,2233,1203],{"class":1080},[1070,2235,2236,2239,2241],{"class":1072,"line":1479},[1070,2237,2238],{"class":1144},"  outcome",[1070,2240,1148],{"class":1080},[1070,2242,2243],{"class":1138}," VerifierOutcome\n",[1070,2245,2246,2249,2251,2254,2257,2259,2261,2263,2265,2268,2270,2273],{"class":1072,"line":1525},[1070,2247,2248],{"class":1144},"  perField",[1070,2250,1148],{"class":1080},[1070,2252,2253],{"class":1138}," Array",[1070,2255,2256],{"class":1080},"\u003C{",[1070,2258,1223],{"class":1144},[1070,2260,1148],{"class":1080},[1070,2262,1151],{"class":1138},[1070,2264,1154],{"class":1080},[1070,2266,2267],{"class":1144}," match",[1070,2269,1148],{"class":1080},[1070,2271,2272],{"class":1138}," boolean",[1070,2274,2275],{"class":1080}," }>\n",[1070,2277,2278,2281,2283,2285,2288,2291],{"class":1072,"line":1552},[1070,2279,2280],{"class":1144},"  revocationTrusted",[1070,2282,1148],{"class":1080},[1070,2284,2272],{"class":1138},[1070,2286,2287],{"class":1080}," |",[1070,2289,2290],{"class":1138}," null",[1070,2292,2293],{"class":1392},"    \u002F\u002F null: no list · false: list failed its own signature\n",[1070,2295,2296,2299,2301],{"class":1072,"line":1604},[1070,2297,2298],{"class":1144},"  keyId",[1070,2300,2126],{"class":1080},[1070,2302,2303],{"class":1138}," string\n",[1070,2305,2306,2309,2311],{"class":1072,"line":1611},[1070,2307,2308],{"class":1144},"  docId",[1070,2310,2126],{"class":1080},[1070,2312,2303],{"class":1138},[1070,2314,2315],{"class":1072,"line":1616},[1070,2316,1345],{"class":1080},[1070,2318,2319],{"class":1072,"line":1668},[1070,2320,1128],{"emptyLinePlaceholder":1127},[1070,2322,2323,2325,2328,2331,2334],{"class":1072,"line":1674},[1070,2324,2074],{"class":1076},[1070,2326,2327],{"class":1134}," async",[1070,2329,2330],{"class":1134}," function",[1070,2332,2333],{"class":1366}," verifyDocument",[1070,2335,2336],{"class":1080},"(\n",[1070,2338,2339,2343,2345,2347],{"class":1072,"line":1680},[1070,2340,2342],{"class":2341},"sHdIc","  qr",[1070,2344,1148],{"class":1080},[1070,2346,1151],{"class":1138},[1070,2348,1339],{"class":1080},[1070,2350,2351,2354,2356,2358,2360,2362,2364,2367],{"class":1072,"line":1686},[1070,2352,2353],{"class":2341},"  claimedFields",[1070,2355,1148],{"class":1080},[1070,2357,2092],{"class":1138},[1070,2359,1497],{"class":1080},[1070,2361,2097],{"class":1138},[1070,2363,1236],{"class":1080},[1070,2365,2366],{"class":1138}," unknown",[1070,2368,2369],{"class":1080},">,\n",[1070,2371,2372,2375,2377,2379],{"class":1072,"line":1691},[1070,2373,2374],{"class":2341},"  config",[1070,2376,1148],{"class":1080},[1070,2378,2080],{"class":1138},[1070,2380,1339],{"class":1080},[1070,2382,2383,2386,2389,2391,2394,2396],{"class":1072,"line":1717},[1070,2384,2385],{"class":1080},"):",[1070,2387,2388],{"class":1138}," Promise",[1070,2390,1497],{"class":1080},[1070,2392,2393],{"class":1138},"Verdict",[1070,2395,1503],{"class":1080},[1070,2397,1203],{"class":1080},[1070,2399,2401,2404,2407,2409],{"class":1072,"line":2400},33,[1070,2402,2403],{"class":1134},"  let",[1070,2405,2406],{"class":1084}," payload",[1070,2408,1148],{"class":1080},[1070,2410,2411],{"class":1138}," QrPayload\n",[1070,2413,2415,2418],{"class":1072,"line":2414},34,[1070,2416,2417],{"class":1076},"  try",[1070,2419,1203],{"class":1080},[1070,2421,2423,2426,2428,2431,2433,2435],{"class":1072,"line":2422},35,[1070,2424,2425],{"class":1084},"    payload",[1070,2427,1638],{"class":1080},[1070,2429,2430],{"class":1366}," decodeQr",[1070,2432,1369],{"class":1144},[1070,2434,1791],{"class":1084},[1070,2436,1440],{"class":1144},[1070,2438,2440,2443,2446],{"class":1072,"line":2439},36,[1070,2441,2442],{"class":1080},"  }",[1070,2444,2445],{"class":1076}," catch",[1070,2447,1203],{"class":1080},[1070,2449,2451,2454,2456,2459,2461,2463,2465,2467,2469,2472,2474,2477,2479,2482,2484,2486],{"class":1072,"line":2450},37,[1070,2452,2453],{"class":1076},"    return",[1070,2455,1081],{"class":1080},[1070,2457,2458],{"class":1144}," outcome",[1070,2460,1148],{"class":1080},[1070,2462,1094],{"class":1080},[1070,2464,2216],{"class":1097},[1070,2466,1233],{"class":1080},[1070,2468,1236],{"class":1080},[1070,2470,2471],{"class":1144}," perField",[1070,2473,1148],{"class":1080},[1070,2475,2476],{"class":1144}," []",[1070,2478,1236],{"class":1080},[1070,2480,2481],{"class":1144}," revocationTrusted",[1070,2483,1148],{"class":1080},[1070,2485,2290],{"class":1080},[1070,2487,1183],{"class":1080},[1070,2489,2491],{"class":1072,"line":2490},38,[1070,2492,2493],{"class":1080},"  }\n",[1070,2495,2497],{"class":1072,"line":2496},39,[1070,2498,1128],{"emptyLinePlaceholder":1127},[1070,2500,2502,2505,2508,2510,2513,2515,2518,2521,2524,2526,2528],{"class":1072,"line":2501},40,[1070,2503,2504],{"class":1134},"  const",[1070,2506,2507],{"class":1084}," matchedKey",[1070,2509,1638],{"class":1080},[1070,2511,2512],{"class":1084}," config",[1070,2514,1016],{"class":1080},[1070,2516,2517],{"class":1084},"publicKeys",[1070,2519,2520],{"class":1144},"[",[1070,2522,2523],{"class":1084},"payload",[1070,2525,1016],{"class":1080},[1070,2527,1749],{"class":1084},[1070,2529,2530],{"class":1144},"]\n",[1070,2532,2534,2537,2540,2543,2546,2549,2552],{"class":1072,"line":2533},41,[1070,2535,2536],{"class":1076},"  if",[1070,2538,2539],{"class":1144}," (",[1070,2541,2542],{"class":1084},"matchedKey",[1070,2544,2545],{"class":1080}," ===",[1070,2547,2548],{"class":1080}," undefined",[1070,2550,2551],{"class":1144},") ",[1070,2553,1372],{"class":1080},[1070,2555,2557,2559,2561,2563,2565,2567,2569,2571,2573,2575,2577,2579,2581,2583,2585,2588,2591,2593,2595,2597,2599,2601,2603,2605,2607,2609,2611],{"class":1072,"line":2556},42,[1070,2558,2453],{"class":1076},[1070,2560,1081],{"class":1080},[1070,2562,2458],{"class":1144},[1070,2564,1148],{"class":1080},[1070,2566,1094],{"class":1080},[1070,2568,2205],{"class":1097},[1070,2570,1233],{"class":1080},[1070,2572,1236],{"class":1080},[1070,2574,2471],{"class":1144},[1070,2576,1148],{"class":1080},[1070,2578,2476],{"class":1144},[1070,2580,1236],{"class":1080},[1070,2582,2481],{"class":1144},[1070,2584,1148],{"class":1080},[1070,2586,2587],{"class":1080}," null,",[1070,2589,2590],{"class":1144}," keyId",[1070,2592,1148],{"class":1080},[1070,2594,2406],{"class":1084},[1070,2596,1016],{"class":1080},[1070,2598,1749],{"class":1084},[1070,2600,1236],{"class":1080},[1070,2602,1623],{"class":1144},[1070,2604,1148],{"class":1080},[1070,2606,2406],{"class":1084},[1070,2608,1016],{"class":1080},[1070,2610,1830],{"class":1084},[1070,2612,1183],{"class":1080},[1070,2614,2616],{"class":1072,"line":2615},43,[1070,2617,2493],{"class":1080},[1070,2619,2621],{"class":1072,"line":2620},44,[1070,2622,1128],{"emptyLinePlaceholder":1127},[1070,2624,2626],{"class":1072,"line":2625},45,[1070,2627,2628],{"class":1392},"  \u002F\u002F The revocation list is untrusted input (often network-fetched): verify its\n",[1070,2630,2632],{"class":1072,"line":2631},46,[1070,2633,2634],{"class":1392},"  \u002F\u002F OWN signature first, and only honor it if that check passes.\n",[1070,2636,2638,2640,2642,2644,2646,2648,2650,2652],{"class":1072,"line":2637},47,[1070,2639,2403],{"class":1134},[1070,2641,2481],{"class":1084},[1070,2643,1148],{"class":1080},[1070,2645,2272],{"class":1138},[1070,2647,2287],{"class":1080},[1070,2649,2290],{"class":1138},[1070,2651,1638],{"class":1080},[1070,2653,2654],{"class":1080}," null\n",[1070,2656,2658,2660,2662,2665,2667,2670,2672],{"class":1072,"line":2657},48,[1070,2659,2536],{"class":1076},[1070,2661,2539],{"class":1144},[1070,2663,2664],{"class":1084},"config",[1070,2666,1016],{"class":1080},[1070,2668,2669],{"class":1084},"revocationList",[1070,2671,2551],{"class":1144},[1070,2673,1372],{"class":1080},[1070,2675,2677,2680,2682,2684,2686,2688,2690,2692,2694,2696,2698],{"class":1072,"line":2676},49,[1070,2678,2679],{"class":1084},"    revocationTrusted",[1070,2681,1638],{"class":1080},[1070,2683,1363],{"class":1076},[1070,2685,2026],{"class":1366},[1070,2687,1369],{"class":1144},[1070,2689,2664],{"class":1084},[1070,2691,1016],{"class":1080},[1070,2693,2669],{"class":1084},[1070,2695,1236],{"class":1080},[1070,2697,2507],{"class":1084},[1070,2699,1440],{"class":1144},[1070,2701,2703],{"class":1072,"line":2702},50,[1070,2704,2493],{"class":1080},[1070,2706,2708],{"class":1072,"line":2707},51,[1070,2709,1128],{"emptyLinePlaceholder":1127},[1070,2711,2713,2715,2718,2720,2722,2724,2726],{"class":1072,"line":2712},52,[1070,2714,2504],{"class":1134},[1070,2716,2717],{"class":1084}," result",[1070,2719,1638],{"class":1080},[1070,2721,1363],{"class":1076},[1070,2723,2021],{"class":1366},[1070,2725,1369],{"class":1144},[1070,2727,1372],{"class":1080},[1070,2729,2731,2734],{"class":1072,"line":2730},53,[1070,2732,2733],{"class":1084},"    qr",[1070,2735,1339],{"class":1080},[1070,2737,2739,2742],{"class":1072,"line":2738},54,[1070,2740,2741],{"class":1084},"    claimedFields",[1070,2743,1339],{"class":1080},[1070,2745,2747,2750,2752,2754,2756,2759],{"class":1072,"line":2746},55,[1070,2748,2749],{"class":1144},"    fieldSchema",[1070,2751,1148],{"class":1080},[1070,2753,2512],{"class":1084},[1070,2755,1016],{"class":1080},[1070,2757,2758],{"class":1084},"fieldSchema",[1070,2760,1339],{"class":1080},[1070,2762,2764,2767,2769,2771,2773,2775],{"class":1072,"line":2763},56,[1070,2765,2766],{"class":1144},"    publicKeys",[1070,2768,1148],{"class":1080},[1070,2770,2512],{"class":1084},[1070,2772,1016],{"class":1080},[1070,2774,2517],{"class":1084},[1070,2776,1339],{"class":1080},[1070,2778,2780,2783,2785,2788,2790,2794,2797,2799,2801,2803,2806,2808,2811,2813,2815,2818,2820,2822,2824,2826,2828,2830,2833,2836,2839],{"class":1072,"line":2779},57,[1070,2781,2782],{"class":1080},"    ...",[1070,2784,1369],{"class":1144},[1070,2786,2787],{"class":1084},"revocationTrusted",[1070,2789,2545],{"class":1080},[1070,2791,2793],{"class":2792},"sfNiH"," true",[1070,2795,2796],{"class":1080}," &&",[1070,2798,2512],{"class":1084},[1070,2800,1016],{"class":1080},[1070,2802,2669],{"class":1084},[1070,2804,2805],{"class":1080}," ?",[1070,2807,1081],{"class":1080},[1070,2809,2810],{"class":1144}," revocation",[1070,2812,1148],{"class":1080},[1070,2814,1081],{"class":1080},[1070,2816,2817],{"class":1144}," list",[1070,2819,1148],{"class":1080},[1070,2821,2512],{"class":1084},[1070,2823,1016],{"class":1080},[1070,2825,2669],{"class":1084},[1070,2827,1088],{"class":1080},[1070,2829,1088],{"class":1080},[1070,2831,2832],{"class":1080}," :",[1070,2834,2835],{"class":1080}," {}",[1070,2837,2838],{"class":1144},")",[1070,2840,1339],{"class":1080},[1070,2842,2844,2846],{"class":1072,"line":2843},58,[1070,2845,2442],{"class":1080},[1070,2847,1440],{"class":1144},[1070,2849,2851],{"class":1072,"line":2850},59,[1070,2852,1128],{"emptyLinePlaceholder":1127},[1070,2854,2856,2858,2860,2862,2864,2866,2869,2871,2874,2876,2878,2881,2883,2886,2888,2891,2893,2895,2898,2900,2903,2905,2907,2909,2911,2913,2916,2918],{"class":1072,"line":2855},60,[1070,2857,2504],{"class":1134},[1070,2859,2471],{"class":1084},[1070,2861,1638],{"class":1080},[1070,2863,2717],{"class":1084},[1070,2865,1016],{"class":1080},[1070,2867,2868],{"class":1084},"perField",[1070,2870,1016],{"class":1080},[1070,2872,2873],{"class":1366},"map",[1070,2875,1369],{"class":1144},[1070,2877,1369],{"class":1080},[1070,2879,2880],{"class":2341},"f",[1070,2882,2838],{"class":1080},[1070,2884,2885],{"class":1134}," =>",[1070,2887,2539],{"class":1144},[1070,2889,2890],{"class":1080},"{",[1070,2892,1223],{"class":1144},[1070,2894,1148],{"class":1080},[1070,2896,2897],{"class":1084}," f",[1070,2899,1016],{"class":1080},[1070,2901,2902],{"class":1084},"path",[1070,2904,1236],{"class":1080},[1070,2906,2267],{"class":1144},[1070,2908,1148],{"class":1080},[1070,2910,2897],{"class":1084},[1070,2912,1016],{"class":1080},[1070,2914,2915],{"class":1084},"match",[1070,2917,1088],{"class":1080},[1070,2919,2920],{"class":1144},"))\n",[1070,2922,2924,2926,2929,2931,2933,2935,2938,2941,2944,2946,2948,2950,2953,2955,2957,2959,2961,2963,2965,2967,2969],{"class":1072,"line":2923},61,[1070,2925,2504],{"class":1134},[1070,2927,2928],{"class":1084}," allMatch",[1070,2930,1638],{"class":1080},[1070,2932,2471],{"class":1084},[1070,2934,1016],{"class":1080},[1070,2936,2937],{"class":1084},"length",[1070,2939,2940],{"class":1080}," >",[1070,2942,2943],{"class":1585}," 0",[1070,2945,2796],{"class":1080},[1070,2947,2471],{"class":1084},[1070,2949,1016],{"class":1080},[1070,2951,2952],{"class":1366},"every",[1070,2954,1369],{"class":1144},[1070,2956,1369],{"class":1080},[1070,2958,2880],{"class":2341},[1070,2960,2838],{"class":1080},[1070,2962,2885],{"class":1134},[1070,2964,2897],{"class":1084},[1070,2966,1016],{"class":1080},[1070,2968,2915],{"class":1084},[1070,2970,1440],{"class":1144},[1070,2972,2974],{"class":1072,"line":2973},62,[1070,2975,1128],{"emptyLinePlaceholder":1127},[1070,2977,2979,2981,2983,2985],{"class":1072,"line":2978},63,[1070,2980,2403],{"class":1134},[1070,2982,2458],{"class":1084},[1070,2984,1148],{"class":1080},[1070,2986,2243],{"class":1138},[1070,2988,2990,2992,2994,2997,3000,3002,3005,3007,3010,3012,3014,3016],{"class":1072,"line":2989},64,[1070,2991,2536],{"class":1076},[1070,2993,2539],{"class":1144},[1070,2995,2996],{"class":1080},"!",[1070,2998,2999],{"class":1084},"result",[1070,3001,1016],{"class":1080},[1070,3003,3004],{"class":1084},"signatureValid",[1070,3006,2551],{"class":1144},[1070,3008,3009],{"class":1084},"outcome",[1070,3011,1638],{"class":1080},[1070,3013,1094],{"class":1080},[1070,3015,2194],{"class":1097},[1070,3017,1101],{"class":1080},[1070,3019,3021,3024,3027,3029,3031,3034,3036,3038,3040,3042,3044],{"class":1072,"line":3020},65,[1070,3022,3023],{"class":1076},"  else",[1070,3025,3026],{"class":1076}," if",[1070,3028,2539],{"class":1144},[1070,3030,2996],{"class":1080},[1070,3032,3033],{"class":1084},"allMatch",[1070,3035,2551],{"class":1144},[1070,3037,3009],{"class":1084},[1070,3039,1638],{"class":1080},[1070,3041,1094],{"class":1080},[1070,3043,2183],{"class":1097},[1070,3045,1101],{"class":1080},[1070,3047,3049,3051,3053,3055,3057,3059,3062,3064,3066,3068,3070,3072,3074,3076],{"class":1072,"line":3048},66,[1070,3050,3023],{"class":1076},[1070,3052,3026],{"class":1076},[1070,3054,2539],{"class":1144},[1070,3056,2999],{"class":1084},[1070,3058,1016],{"class":1080},[1070,3060,3061],{"class":1084},"revoked",[1070,3063,2545],{"class":1080},[1070,3065,2793],{"class":2792},[1070,3067,2551],{"class":1144},[1070,3069,3009],{"class":1084},[1070,3071,1638],{"class":1080},[1070,3073,1094],{"class":1080},[1070,3075,2172],{"class":1097},[1070,3077,1101],{"class":1080},[1070,3079,3081,3083,3085,3087,3089,3091],{"class":1072,"line":3080},67,[1070,3082,3023],{"class":1076},[1070,3084,2458],{"class":1084},[1070,3086,1638],{"class":1080},[1070,3088,1094],{"class":1080},[1070,3090,2161],{"class":1097},[1070,3092,1101],{"class":1080},[1070,3094,3096],{"class":1072,"line":3095},68,[1070,3097,1128],{"emptyLinePlaceholder":1127},[1070,3099,3101,3104,3106,3108,3110,3112,3114,3116,3118,3120,3122,3124,3126,3128,3130,3132,3134,3136,3138,3140],{"class":1072,"line":3100},69,[1070,3102,3103],{"class":1076},"  return",[1070,3105,1081],{"class":1080},[1070,3107,2458],{"class":1084},[1070,3109,1236],{"class":1080},[1070,3111,2471],{"class":1084},[1070,3113,1236],{"class":1080},[1070,3115,2481],{"class":1084},[1070,3117,1236],{"class":1080},[1070,3119,2590],{"class":1144},[1070,3121,1148],{"class":1080},[1070,3123,2406],{"class":1084},[1070,3125,1016],{"class":1080},[1070,3127,1749],{"class":1084},[1070,3129,1236],{"class":1080},[1070,3131,1623],{"class":1144},[1070,3133,1148],{"class":1080},[1070,3135,2406],{"class":1084},[1070,3137,1016],{"class":1080},[1070,3139,1830],{"class":1084},[1070,3141,1183],{"class":1080},[1070,3143,3145],{"class":1072,"line":3144},70,[1070,3146,1345],{"class":1080},[941,3148,3149],{},"The six verdicts:",[3151,3152,3153,3165],"table",{},[3154,3155,3156],"thead",{},[3157,3158,3159,3162],"tr",{},[3160,3161,2393],"th",{},[3160,3163,3164],{},"Meaning",[3166,3167,3168,3178,3187,3199,3208,3220],"tbody",{},[3157,3169,3170,3175],{},[3171,3172,3173],"td",{},[953,3174,2161],{},[3171,3176,3177],{},"Signature verifies with a bundled key, every field matches, not revoked.",[3157,3179,3180,3184],{},[3171,3181,3182],{},[953,3183,2172],{},[3171,3185,3186],{},"Genuinely issued by the firm, later withdrawn (on the trusted revocation list).",[3157,3188,3189,3193],{},[3171,3190,3191],{},[953,3192,2183],{},[3171,3194,3195,3196,3198],{},"Signature is valid but at least one typed value does not match its committed hash — ",[953,3197,2868],{}," localizes which.",[3157,3200,3201,3205],{},[3171,3202,3203],{},[953,3204,2194],{},[3171,3206,3207],{},"The payload does not verify against the key it names — forged or corrupted.",[3157,3209,3210,3214],{},[3171,3211,3212],{},[953,3213,2205],{},[3171,3215,3216,3217,3219],{},"The QR names a ",[953,3218,1749],{}," this verifier build does not bundle — update the verifier.",[3157,3221,3222,3226],{},[3171,3223,3224],{},[953,3225,2216],{},[3171,3227,3228],{},"The scanned\u002Fpasted text is not a valid attestation payload.",[1037,3230,3232],{"id":3231},"run-a-verification","Run a verification",[941,3234,3235],{},"The third party scans the QR and types the values as printed on the paper:",[1061,3237,3239],{"className":1063,"code":3238,"language":1065,"meta":1066,"style":1066},"const config = {\n  publicKeys: { [keyId]: publicKeyB64 },  \u002F\u002F published by the firm, bundled at build time\n  fieldSchema: attestation,               \u002F\u002F the same three-field schema\n}\n\n\u002F\u002F A human reads \"1,234.50\" off the printed invoice. The firm stored the\n\u002F\u002F number 1234.5 — the 'cents' normalizer canonicalizes both to the same\n\u002F\u002F integer of cents, so the commitment matches with no float math.\nconst printed = { invoiceNo: 'INV-1042', total: '1234.50', issueDate: '2026-05-29' }\n\nconst verdict = await verifyDocument(qr, printed, config)\n",[953,3240,3241,3252,3277,3291,3295,3299,3304,3309,3314,3362,3366],{"__ignoreMap":1066},[1070,3242,3243,3245,3248,3250],{"class":1072,"line":1073},[1070,3244,1194],{"class":1134},[1070,3246,3247],{"class":1084}," config ",[1070,3249,1200],{"class":1080},[1070,3251,1203],{"class":1080},[1070,3253,3254,3256,3258,3260,3262,3264,3267,3269,3271,3274],{"class":1072,"line":1104},[1070,3255,2087],{"class":1144},[1070,3257,1148],{"class":1080},[1070,3259,1081],{"class":1080},[1070,3261,1917],{"class":1144},[1070,3263,1749],{"class":1084},[1070,3265,3266],{"class":1144},"]",[1070,3268,1148],{"class":1080},[1070,3270,1698],{"class":1084},[1070,3272,3273],{"class":1080},"},",[1070,3275,3276],{"class":1392},"  \u002F\u002F published by the firm, bundled at build time\n",[1070,3278,3279,3281,3283,3286,3288],{"class":1072,"line":1124},[1070,3280,2111],{"class":1144},[1070,3282,1148],{"class":1080},[1070,3284,3285],{"class":1084}," attestation",[1070,3287,1236],{"class":1080},[1070,3289,3290],{"class":1392},"               \u002F\u002F the same three-field schema\n",[1070,3292,3293],{"class":1072,"line":1131},[1070,3294,1345],{"class":1080},[1070,3296,3297],{"class":1072,"line":1186},[1070,3298,1128],{"emptyLinePlaceholder":1127},[1070,3300,3301],{"class":1072,"line":1191},[1070,3302,3303],{"class":1392},"\u002F\u002F A human reads \"1,234.50\" off the printed invoice. The firm stored the\n",[1070,3305,3306],{"class":1072,"line":1206},[1070,3307,3308],{"class":1392},"\u002F\u002F number 1234.5 — the 'cents' normalizer canonicalizes both to the same\n",[1070,3310,3311],{"class":1072,"line":1217},[1070,3312,3313],{"class":1392},"\u002F\u002F integer of cents, so the commitment matches with no float math.\n",[1070,3315,3316,3318,3321,3323,3325,3327,3329,3331,3333,3335,3337,3339,3341,3343,3346,3348,3350,3352,3354,3356,3358,3360],{"class":1072,"line":1260},[1070,3317,1194],{"class":1134},[1070,3319,3320],{"class":1084}," printed ",[1070,3322,1200],{"class":1080},[1070,3324,1081],{"class":1080},[1070,3326,1157],{"class":1144},[1070,3328,1148],{"class":1080},[1070,3330,1094],{"class":1080},[1070,3332,1574],{"class":1097},[1070,3334,1233],{"class":1080},[1070,3336,1236],{"class":1080},[1070,3338,1166],{"class":1144},[1070,3340,1148],{"class":1080},[1070,3342,1094],{"class":1080},[1070,3344,3345],{"class":1097},"1234.50",[1070,3347,1233],{"class":1080},[1070,3349,1236],{"class":1080},[1070,3351,1176],{"class":1144},[1070,3353,1148],{"class":1080},[1070,3355,1094],{"class":1080},[1070,3357,1597],{"class":1097},[1070,3359,1233],{"class":1080},[1070,3361,1183],{"class":1080},[1070,3363,3364],{"class":1072,"line":1297},[1070,3365,1128],{"emptyLinePlaceholder":1127},[1070,3367,3368,3370,3373,3375,3377,3379,3382,3384,3387,3389],{"class":1072,"line":1333},[1070,3369,1194],{"class":1134},[1070,3371,3372],{"class":1084}," verdict ",[1070,3374,1200],{"class":1080},[1070,3376,1363],{"class":1076},[1070,3378,2333],{"class":1366},[1070,3380,3381],{"class":1084},"(qr",[1070,3383,1236],{"class":1080},[1070,3385,3386],{"class":1084}," printed",[1070,3388,1236],{"class":1080},[1070,3390,3391],{"class":1084}," config)\n",[1061,3393,3395],{"className":1798,"code":3394,"language":141,"meta":1066,"style":1066},"{\n  \"outcome\": \"authentic-valid\",\n  \"perField\": [\n    { \"path\": \"invoiceNo\", \"match\": true },\n    { \"path\": \"total\", \"match\": true },\n    { \"path\": \"issueDate\", \"match\": true }\n  ],\n  \"revocationTrusted\": null,\n  \"keyId\": \"bd7e8268071ac41f\",\n  \"docId\": \"01JZK7Y1Q2M4N8R3T5V7X9ZABC\"\n}\n",[953,3396,3397,3401,3419,3431,3463,3495,3527,3532,3545,3563,3579],{"__ignoreMap":1066},[1070,3398,3399],{"class":1072,"line":1073},[1070,3400,1372],{"class":1080},[1070,3402,3403,3405,3407,3409,3411,3413,3415,3417],{"class":1072,"line":1104},[1070,3404,1810],{"class":1080},[1070,3406,3009],{"class":1134},[1070,3408,1816],{"class":1080},[1070,3410,1148],{"class":1080},[1070,3412,1837],{"class":1080},[1070,3414,2161],{"class":1097},[1070,3416,1816],{"class":1080},[1070,3418,1339],{"class":1080},[1070,3420,3421,3423,3425,3427,3429],{"class":1072,"line":1124},[1070,3422,1810],{"class":1080},[1070,3424,2868],{"class":1134},[1070,3426,1816],{"class":1080},[1070,3428,1148],{"class":1080},[1070,3430,1214],{"class":1080},[1070,3432,3433,3435,3437,3439,3441,3443,3445,3447,3449,3451,3453,3455,3457,3459,3461],{"class":1072,"line":1131},[1070,3434,1220],{"class":1080},[1070,3436,1837],{"class":1080},[1070,3438,2902],{"class":1138},[1070,3440,1816],{"class":1080},[1070,3442,1148],{"class":1080},[1070,3444,1837],{"class":1080},[1070,3446,1230],{"class":1097},[1070,3448,1816],{"class":1080},[1070,3450,1236],{"class":1080},[1070,3452,1837],{"class":1080},[1070,3454,2915],{"class":1138},[1070,3456,1816],{"class":1080},[1070,3458,1148],{"class":1080},[1070,3460,2793],{"class":1080},[1070,3462,1257],{"class":1080},[1070,3464,3465,3467,3469,3471,3473,3475,3477,3479,3481,3483,3485,3487,3489,3491,3493],{"class":1072,"line":1186},[1070,3466,1220],{"class":1080},[1070,3468,1837],{"class":1080},[1070,3470,2902],{"class":1138},[1070,3472,1816],{"class":1080},[1070,3474,1148],{"class":1080},[1070,3476,1837],{"class":1080},[1070,3478,1271],{"class":1097},[1070,3480,1816],{"class":1080},[1070,3482,1236],{"class":1080},[1070,3484,1837],{"class":1080},[1070,3486,2915],{"class":1138},[1070,3488,1816],{"class":1080},[1070,3490,1148],{"class":1080},[1070,3492,2793],{"class":1080},[1070,3494,1257],{"class":1080},[1070,3496,3497,3499,3501,3503,3505,3507,3509,3511,3513,3515,3517,3519,3521,3523,3525],{"class":1072,"line":1191},[1070,3498,1220],{"class":1080},[1070,3500,1837],{"class":1080},[1070,3502,2902],{"class":1138},[1070,3504,1816],{"class":1080},[1070,3506,1148],{"class":1080},[1070,3508,1837],{"class":1080},[1070,3510,1308],{"class":1097},[1070,3512,1816],{"class":1080},[1070,3514,1236],{"class":1080},[1070,3516,1837],{"class":1080},[1070,3518,2915],{"class":1138},[1070,3520,1816],{"class":1080},[1070,3522,1148],{"class":1080},[1070,3524,2793],{"class":1080},[1070,3526,1183],{"class":1080},[1070,3528,3529],{"class":1072,"line":1206},[1070,3530,3531],{"class":1080},"  ],\n",[1070,3533,3534,3536,3538,3540,3542],{"class":1072,"line":1217},[1070,3535,1810],{"class":1080},[1070,3537,2787],{"class":1134},[1070,3539,1816],{"class":1080},[1070,3541,1148],{"class":1080},[1070,3543,3544],{"class":1080}," null,\n",[1070,3546,3547,3549,3551,3553,3555,3557,3559,3561],{"class":1072,"line":1260},[1070,3548,1810],{"class":1080},[1070,3550,1749],{"class":1134},[1070,3552,1816],{"class":1080},[1070,3554,1148],{"class":1080},[1070,3556,1837],{"class":1080},[1070,3558,1899],{"class":1097},[1070,3560,1816],{"class":1080},[1070,3562,1339],{"class":1080},[1070,3564,3565,3567,3569,3571,3573,3575,3577],{"class":1072,"line":1297},[1070,3566,1810],{"class":1080},[1070,3568,1830],{"class":1134},[1070,3570,1816],{"class":1080},[1070,3572,1148],{"class":1080},[1070,3574,1837],{"class":1080},[1070,3576,1840],{"class":1097},[1070,3578,1964],{"class":1080},[1070,3580,3581],{"class":1072,"line":1333},[1070,3582,1345],{"class":1080},[941,3584,3585,3586,3588],{},"Tamper with a single value and the verdict flips to ",[953,3587,2183],{},", naming the\nfield:",[1061,3590,3592],{"className":1063,"code":3591,"language":1065,"meta":1066,"style":1066},"const tampered = await verifyDocument(qr, { ...printed, total: '9999.00' }, config)\n\u002F\u002F → tampered.outcome                                          === 'altered'\n\u002F\u002F → tampered.perField.find((f) => f.path === 'total')?.match  === false\n\u002F\u002F → tampered.perField.find((f) => f.path === 'invoiceNo')?.match === true\n",[953,3593,3594,3637,3642,3647],{"__ignoreMap":1066},[1070,3595,3596,3598,3601,3603,3605,3607,3609,3611,3613,3616,3619,3621,3623,3625,3627,3630,3632,3635],{"class":1072,"line":1073},[1070,3597,1194],{"class":1134},[1070,3599,3600],{"class":1084}," tampered ",[1070,3602,1200],{"class":1080},[1070,3604,1363],{"class":1076},[1070,3606,2333],{"class":1366},[1070,3608,3381],{"class":1084},[1070,3610,1236],{"class":1080},[1070,3612,1081],{"class":1080},[1070,3614,3615],{"class":1080}," ...",[1070,3617,3618],{"class":1084},"printed",[1070,3620,1236],{"class":1080},[1070,3622,1166],{"class":1144},[1070,3624,1148],{"class":1080},[1070,3626,1094],{"class":1080},[1070,3628,3629],{"class":1097},"9999.00",[1070,3631,1233],{"class":1080},[1070,3633,3634],{"class":1080}," },",[1070,3636,3391],{"class":1084},[1070,3638,3639],{"class":1072,"line":1104},[1070,3640,3641],{"class":1392},"\u002F\u002F → tampered.outcome                                          === 'altered'\n",[1070,3643,3644],{"class":1072,"line":1124},[1070,3645,3646],{"class":1392},"\u002F\u002F → tampered.perField.find((f) => f.path === 'total')?.match  === false\n",[1070,3648,3649],{"class":1072,"line":1131},[1070,3650,3651],{"class":1392},"\u002F\u002F → tampered.perField.find((f) => f.path === 'invoiceNo')?.match === true\n",[1037,3653,3655],{"id":3654},"revocation-is-it-still-valid-today","Revocation — \"is it still valid today?\"",[941,3657,3658,3659,3662],{},"A signature never expires, so the firm answers \"still valid?\" with a signed\n",[944,3660,3661],{},"revocation list",". Firm side:",[1061,3664,3666],{"className":1063,"code":3665,"language":1065,"meta":1066,"style":1066},"await vault.revokeAttestation(docId)          \u002F\u002F vault.unrevokeAttestation(docId) undoes it\nconst list = await vault.publishRevocationList()\n",[953,3667,3668,3685],{"__ignoreMap":1066},[1070,3669,3670,3672,3674,3676,3679,3682],{"class":1072,"line":1073},[1070,3671,1528],{"class":1076},[1070,3673,1489],{"class":1084},[1070,3675,1016],{"class":1080},[1070,3677,3678],{"class":1366},"revokeAttestation",[1070,3680,3681],{"class":1084},"(docId)          ",[1070,3683,3684],{"class":1392},"\u002F\u002F vault.unrevokeAttestation(docId) undoes it\n",[1070,3686,3687,3689,3692,3694,3696,3698,3700,3703],{"class":1072,"line":1104},[1070,3688,1194],{"class":1134},[1070,3690,3691],{"class":1084}," list ",[1070,3693,1200],{"class":1080},[1070,3695,1363],{"class":1076},[1070,3697,1489],{"class":1084},[1070,3699,1016],{"class":1080},[1070,3701,3702],{"class":1366},"publishRevocationList",[1070,3704,1714],{"class":1084},[1061,3706,3708],{"className":1798,"code":3707,"language":141,"meta":1066,"style":1066},"{\n  \"v\": 1,\n  \"revokedDocIds\": [\"01JZK7Y1Q2M4N8R3T5V7X9ZABC\"],\n  \"asOf\": \"2026-05-29T00:00:00.000Z\",\n  \"keyId\": \"bd7e8268071ac41f\",\n  \"sig\": \"JzGDN88XzGYB6Im0NC-XLUVAUEjQTHCqqyOhuoT72sFU…\"\n}\n",[953,3709,3710,3714,3728,3749,3769,3787,3804],{"__ignoreMap":1066},[1070,3711,3712],{"class":1072,"line":1073},[1070,3713,1372],{"class":1080},[1070,3715,3716,3718,3720,3722,3724,3726],{"class":1072,"line":1104},[1070,3717,1810],{"class":1080},[1070,3719,1813],{"class":1134},[1070,3721,1816],{"class":1080},[1070,3723,1148],{"class":1080},[1070,3725,1821],{"class":1585},[1070,3727,1339],{"class":1080},[1070,3729,3730,3732,3735,3737,3739,3741,3743,3745,3747],{"class":1072,"line":1124},[1070,3731,1810],{"class":1080},[1070,3733,3734],{"class":1134},"revokedDocIds",[1070,3736,1816],{"class":1080},[1070,3738,1148],{"class":1080},[1070,3740,1917],{"class":1080},[1070,3742,1816],{"class":1080},[1070,3744,1840],{"class":1097},[1070,3746,1816],{"class":1080},[1070,3748,1945],{"class":1080},[1070,3750,3751,3753,3756,3758,3760,3762,3765,3767],{"class":1072,"line":1131},[1070,3752,1810],{"class":1080},[1070,3754,3755],{"class":1134},"asOf",[1070,3757,1816],{"class":1080},[1070,3759,1148],{"class":1080},[1070,3761,1837],{"class":1080},[1070,3763,3764],{"class":1097},"2026-05-29T00:00:00.000Z",[1070,3766,1816],{"class":1080},[1070,3768,1339],{"class":1080},[1070,3770,3771,3773,3775,3777,3779,3781,3783,3785],{"class":1072,"line":1186},[1070,3772,1810],{"class":1080},[1070,3774,1749],{"class":1134},[1070,3776,1816],{"class":1080},[1070,3778,1148],{"class":1080},[1070,3780,1837],{"class":1080},[1070,3782,1899],{"class":1097},[1070,3784,1816],{"class":1080},[1070,3786,1339],{"class":1080},[1070,3788,3789,3791,3793,3795,3797,3799,3802],{"class":1072,"line":1191},[1070,3790,1810],{"class":1080},[1070,3792,1952],{"class":1134},[1070,3794,1816],{"class":1080},[1070,3796,1148],{"class":1080},[1070,3798,1837],{"class":1080},[1070,3800,3801],{"class":1097},"JzGDN88XzGYB6Im0NC-XLUVAUEjQTHCqqyOhuoT72sFU…",[1070,3803,1964],{"class":1080},[1070,3805,3806],{"class":1072,"line":1206},[1070,3807,1345],{"class":1080},[941,3809,3810,3811,3813],{},"The list is signed with the same document-signing key, so the verifier can\ntrust a copy from anywhere — bundle it at build time or fetch it when online.\nPass it as ",[953,3812,2669],{}," in the config; a revoked document then reads:",[1061,3815,3817],{"className":1063,"code":3816,"language":1065,"meta":1066,"style":1066},"const v = await verifyDocument(qr, printed, { ...config, revocationList: list })\n\u002F\u002F → v.outcome === 'authentic-revoked'   (issued by the firm, since withdrawn)\n",[953,3818,3819,3859],{"__ignoreMap":1066},[1070,3820,3821,3823,3826,3828,3830,3832,3834,3836,3838,3840,3842,3844,3846,3848,3851,3853,3855,3857],{"class":1072,"line":1073},[1070,3822,1194],{"class":1134},[1070,3824,3825],{"class":1084}," v ",[1070,3827,1200],{"class":1080},[1070,3829,1363],{"class":1076},[1070,3831,2333],{"class":1366},[1070,3833,3381],{"class":1084},[1070,3835,1236],{"class":1080},[1070,3837,3386],{"class":1084},[1070,3839,1236],{"class":1080},[1070,3841,1081],{"class":1080},[1070,3843,3615],{"class":1080},[1070,3845,2664],{"class":1084},[1070,3847,1236],{"class":1080},[1070,3849,3850],{"class":1144}," revocationList",[1070,3852,1148],{"class":1080},[1070,3854,3691],{"class":1084},[1070,3856,1437],{"class":1080},[1070,3858,1440],{"class":1084},[1070,3860,3861],{"class":1072,"line":1104},[1070,3862,3863],{"class":1392},"\u002F\u002F → v.outcome === 'authentic-revoked'   (issued by the firm, since withdrawn)\n",[941,3865,3866,3867,3869,3870,3873,3874,3876,3877,3880],{},"If the list fails its own signature check, ",[953,3868,2787],{}," is ",[953,3871,3872],{},"false",",\nthe list is ignored, and an otherwise-authentic document stays\n",[953,3875,2161],{}," — a UI should downgrade the wording (\"revocation status\ncould not be confirmed\") but a bad list can ",[944,3878,3879],{},"never flip a real authenticity\npass into a failure",", and never hide a signature or field mismatch.",[1037,3882,1058],{"id":3883},"field-normalizers",[941,3885,3886],{},"Both sides normalize a value to a canonical string before hashing, with the\nsame function — so a value presented identically on both sides always\nround-trips. The seven built-in normalizers:",[3151,3888,3889,3902],{},[3154,3890,3891],{},[3157,3892,3893,3896,3899],{},[3160,3894,3895],{},"Normalizer",[3160,3897,3898],{},"Canonical form",[3160,3900,3901],{},"Example",[3166,3903,3904,3923,3941,3957,3974,3992,4012],{},[3157,3905,3906,3911,3914],{},[3171,3907,3908],{},[953,3909,3910],{},"trim",[3171,3912,3913],{},"trimmed string",[3171,3915,3916,3919,3920],{},[953,3917,3918],{},"'  ACME Co '"," → ",[953,3921,3922],{},"'ACME Co'",[3157,3924,3925,3930,3933],{},[3171,3926,3927],{},[953,3928,3929],{},"lower",[3171,3931,3932],{},"trimmed, lowercase",[3171,3934,3935,3919,3938],{},[953,3936,3937],{},"'ACME'",[953,3939,3940],{},"'acme'",[3157,3942,3943,3948,3951],{},[3171,3944,3945],{},[953,3946,3947],{},"upper",[3171,3949,3950],{},"trimmed, uppercase",[3171,3952,3953,3919,3955],{},[953,3954,3940],{},[953,3956,3937],{},[3157,3958,3959,3963,3966],{},[3171,3960,3961],{},[953,3962,1246],{},[3171,3964,3965],{},"alphanumerics only, uppercase",[3171,3967,3968,3919,3971],{},[953,3969,3970],{},"'inv-1042'",[953,3972,3973],{},"'INV1042'",[3157,3975,3976,3981,3984],{},[3171,3977,3978],{},[953,3979,3980],{},"digits",[3171,3982,3983],{},"digits only",[3171,3985,3986,3919,3989],{},[953,3987,3988],{},"'+66 2-123-4567'",[953,3990,3991],{},"'6621234567'",[3157,3993,3994,3998,4001],{},[3171,3995,3996],{},[953,3997,1285],{},[3171,3999,4000],{},"integer of cents",[3171,4002,4003,4005,4006,3919,4009],{},[953,4004,1053],{}," and ",[953,4007,4008],{},"'฿1,234.50'",[953,4010,4011],{},"'123450'",[3157,4013,4014,4018,4021],{},[3171,4015,4016],{},[953,4017,1321],{},[3171,4019,4020],{},"UTC calendar date",[3171,4022,4023,3919,4026],{},[953,4024,4025],{},"'2026-05-29'",[953,4027,4025],{},[1037,4029,4031],{"id":4030},"trust-model","Trust model",[1725,4033,4034,4046,4052],{},[1000,4035,4036,4039,4040,4042,4043,4045],{},[944,4037,4038],{},"The trust anchor is bundled, not fetched."," The verifier ships the firm's\npublic key(s) and the field schema inside its build — there is nothing to\ntrust at verification time. ",[953,4041,2517],{}," is a map keyed by ",[953,4044,1749],{}," and each\nQR names the key that signed it, so one verifier build can bundle several\nfirm keys (or several firms) and route each document to the right one.",[1000,4047,4048,4051],{},[944,4049,4050],{},"The QR is not a data leak."," It carries salted hashes and a signature —\nno field values. Verification requires the paper (or a copy of the values).",[1000,4053,4054,4057],{},[944,4055,4056],{},"Verification proves issuance, not truth."," A green verdict means \"the\nfirm signed exactly these values for this document\" — nothing more.",[1037,4059,4061],{"id":4060},"limits-gotchas","Limits & gotchas",[1725,4063,4064,4087,4096,4112],{},[1000,4065,4066,4072,4073,4075,4076,4078,4079,4082,4083,4086],{},[944,4067,4068,4071],{},[953,4069,4070],{},"verifyDocument"," can still throw on bad claimed values",": typing a\nnon-numeric string into a ",[953,4074,1285],{}," field or an unparseable date into an\n",[953,4077,1321],{}," field throws from the normalizer, and omitting a declared field\nfrom ",[953,4080,4081],{},"claimedFields"," entirely throws before hashing. Wrap the call in\n",[953,4084,4085],{},"try\u002Fcatch"," in a UI and render a \"could not verify\" state.",[1000,4088,4089,4092,4093,4095],{},[944,4090,4091],{},"The verifier's schema must match the issuing schema exactly"," (same\nfields, same order). A field-count mismatch is reported as ",[953,4094,2183],{}," with\nevery field marked non-matching — not as a distinct verdict.",[1000,4097,4098,4105,4106,4108,4109,4111],{},[944,4099,4100,4101,4104],{},"Prefer ISO date strings over ",[953,4102,4103],{},"Date"," objects"," for ",[953,4107,1321],{}," fields: the\nnormalizer takes the UTC calendar date, so a local-time ",[953,4110,4103],{}," near\nmidnight can shift by a day in non-UTC environments.",[1000,4113,4114,4117,4118,4120,4121,4123,4124,4126,4127,1016],{},[944,4115,4116],{},"Revocation is per attestation, not per record",": ",[953,4119,3678],{},"\ntakes the ",[953,4122,1830],{}," returned by ",[953,4125,1647],{},". Re-issuing the same\nrecord mints a new ",[953,4128,1830],{},[1037,4130,4132],{"id":4131},"see-also","See also",[1725,4134,4135,4144,4149],{},[1000,4136,4137,4139,4140,1988,4142,1059],{},[969,4138,1012],{"href":610}," — issue-side reference\n(",[953,4141,959],{},[953,4143,955],{},[1000,4145,4146,4148],{},[969,4147,1777],{"href":520}," — the\ngeneration side: render the QR into a server-generated PDF.",[1000,4150,4151,4153],{},[969,4152,991],{"href":48}," — what a vault is\nand how collections are declared.",[4155,4156,4157],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}",{"title":1066,"searchDepth":1124,"depth":1124,"links":4159},[4160,4161,4162,4163,4164,4165,4166,4167,4168],{"id":1039,"depth":1104,"text":1040},{"id":1784,"depth":1104,"text":1785},{"id":1977,"depth":1104,"text":1978},{"id":3231,"depth":1104,"text":3232},{"id":3654,"depth":1104,"text":3655},{"id":3883,"depth":1104,"text":1058},{"id":4030,"depth":1104,"text":4031},{"id":4060,"depth":1104,"text":4061},{"id":4131,"depth":1104,"text":4132},null,"Issue a signed per-field commitment as a QR code, then verify it fully offline against the firm's published Ed25519 key — six verdicts, revocation included.","md",{},{"title":515,"description":4170},"stable","important","teKwiONI3bODddZKGsUaQFhuXsNlxDiZhlcWpLLUz0w",1791896575122]