I built a verifier that never checks anything. It passes your receipt schema.

Описание и применение

В статье описывается, как создать проверочный механизм, который не допускает подделки чеков, используя оркестровку проверки и подпись результата.

Задача

A verification pipeline can issue receipts that claim a verdict without actually performing the check, allowing forgery.

Результат

The oracle‑based receipt design ensures that a receipt cannot be forged because the signature is produced only after the verifier executes the registered check. Stubs cannot produce a true verdict without running the check.

Рабочий процесс

• Define artifact and verdict
• Create receipt with artifact hash and verdict
• Compare real and stub verifier outputs
• Add check_id and signed check_name to receipt
• Implement oracle that runs registered check and signs result

Доказательства

A true verdict, for the real check's id, signed. The check never ran.

Источник

The swapped bytes get a false receipt, validly signed. The stub cannot ask for a true one, because it cannot ask for a verdict at all.

Источник