{
  "tool_id": "art-129-webbotauth-signature-verifier",
  "note": "Fixed Ed25519 test keypair — precomputed over RFC 9421 base with the covered_components below. golden_hash filled by `node golden-parity.test.mjs --update`.",
  "vectors": [
    {
      "name": "accept-valid-signature",
      "policy_parameters": {
        "covered_components": [
          {
            "name": "method",
            "value": "POST"
          },
          {
            "name": "@authority",
            "value": "api.example.com"
          },
          {
            "name": "@path",
            "value": "/agent/v1/execute"
          }
        ],
        "signature_params": "(\"method\" \"@authority\" \"@path\");created=1750000000;keyid=\"key-2026-06\";tag=\"web-bot-auth\";alg=\"ed25519\"",
        "signature_b64": "ruUab1uVdHazfuOcU0E4qLcTnOM2Z7zYHiluP5qxDZkKbw8EjPNarFHL7G2fS2DhnFH1xlpbihrIkOm8jwxIDA==",
        "public_key_jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
          "x": "WrHvnND7oaWfvrGxUU3FNeJaQDwYj4K3e5fl0fH5p2g"
        },
        "alg": "ed25519",
        "created": 1750000000,
        "now_unix": 1750003600,
        "max_age_s": 3600
      },
      "output_payload": {
        "signature_cryptographically_valid": true,
        "alg_ok": true,
        "tag_ok": true,
        "fresh": true,
        "verdict": "ACCEPT"
      },
      "golden_hash": "83f11820f020316b33d2cb67ed8b666148ad7166aa5b5bef896186818d3102f6"
    },
    {
      "name": "refuse-bad-signature",
      "policy_parameters": {
        "covered_components": [
          {
            "name": "method",
            "value": "GET"
          },
          {
            "name": "@authority",
            "value": "api.example.com"
          }
        ],
        "signature_params": "(\"method\" \"@authority\");created=1750000000;keyid=\"key-2026-06\";tag=\"web-bot-auth\";alg=\"ed25519\"",
        "signature_b64": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
        "public_key_jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
          "x": "WrHvnND7oaWfvrGxUU3FNeJaQDwYj4K3e5fl0fH5p2g"
        },
        "alg": "ed25519",
        "created": 1750000000,
        "now_unix": 1750003600,
        "max_age_s": 3600
      },
      "output_payload": {
        "signature_cryptographically_valid": false,
        "alg_ok": true,
        "tag_ok": true,
        "fresh": true,
        "verdict": "REFUSE"
      },
      "golden_hash": "62675503ab834108b742c69927bf3f919ee730d0b9bda90d0d75bd28f749d991"
    },
    {
      "name": "refuse-tag-mismatch",
      "policy_parameters": {
        "covered_components": [
          {
            "name": "method",
            "value": "POST"
          }
        ],
        "signature_params": "(\"method\");created=1750000000;keyid=\"key-2026-06\";tag=\"custom-bot\";alg=\"ed25519\"",
        "signature_b64": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
        "public_key_jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
          "x": "WrHvnND7oaWfvrGxUU3FNeJaQDwYj4K3e5fl0fH5p2g"
        },
        "alg": "ed25519",
        "created": 1750000000,
        "now_unix": 1750003600
      },
      "output_payload": {
        "signature_cryptographically_valid": false,
        "alg_ok": true,
        "tag_ok": false,
        "fresh": true,
        "verdict": "REFUSE"
      },
      "golden_hash": "baf4a5bc08d4574df9c293164550af2cf80182a41efeb40b640e824a38223e54"
    },
    {
      "name": "refuse-stale-signature",
      "policy_parameters": {
        "covered_components": [
          {
            "name": "method",
            "value": "POST"
          }
        ],
        "signature_params": "(\"method\");created=1749990000;keyid=\"key-2026-06\";tag=\"web-bot-auth\";alg=\"ed25519\"",
        "signature_b64": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
        "public_key_jwk": {
          "kty": "OKP",
          "crv": "Ed25519",
          "x": "WrHvnND7oaWfvrGxUU3FNeJaQDwYj4K3e5fl0fH5p2g"
        },
        "alg": "ed25519",
        "created": 1749990000,
        "now_unix": 1750003600,
        "max_age_s": 3600
      },
      "output_payload": {
        "signature_cryptographically_valid": false,
        "alg_ok": true,
        "tag_ok": true,
        "fresh": false,
        "verdict": "REFUSE"
      },
      "golden_hash": "56667f18429558204b2a2ae6feb9604362fa73a39fcf7f224157ec52dbe509a7"
    }
  ]
}