I built a verifier that never checks anything. It passes your receipt schema.

说明与用途

文章说明如何构建一个防止收据伪造的验证器，使用一个外部的 oracle 来执行检查并签名结果，而不是让 stub 生成真值。

问题

A verification pipeline can issue receipts that claim a verdict without actually performing the check, allowing forgery.

结果

The oracle‑based receipt design ensures that a receipt cannot be forged because the signature is produced only after the verifier executes the registered check. Stubs cannot produce a true verdict without running the check.

工作流

• Define artifact and verdict
• Create receipt with artifact hash and verdict
• Compare real and stub verifier outputs
• Add check_id and signed check_name to receipt
• Implement oracle that runs registered check and signs result

证据

A true verdict, for the real check's id, signed. The check never ran.

来源

The swapped bytes get a false receipt, validly signed. The stub cannot ask for a true one, because it cannot ask for a verdict at all.

来源