{
  "tool_id": "art-124-content-credential-signature-verifier",
  "kernel_id": "art-124-content-credential-signature-verifier",
  "display_name": "Content Credential Signature Verifier",
  "tool_version": "1.0.0",
  "mandate_type": "compliance_mandate",
  "purpose": "Verify-only node: callable in chains, carrying no compute-proof claim. Verify the COSE_Sign1 claim signature against a caller-supplied signer public key using crypto.subtle.verify (Ed25519/ES256/ES384/PS256). Trust-anchor membership, cert validity window, and revocation status are caller-supplied policy inputs: zero network, no OCSP. Emits ACCEPT or REFUSE verdict. PS256 (RSA-PSS) support means this kernel has no faithful sync in-guest verifier today, so its zkVM compute-integrity proof is out of the ocg-p18-deterministic profile's scope: not counted as proven.",
  "control_description": "Verify-only node: callable in chains, carrying no compute-proof claim. Verify the COSE_Sign1 claim signature against a caller-supplied signer public key using crypto.subtle.verify (Ed25519/ES256/ES384/PS256). Trust-anchor membership, cert validity window, and revocation status are caller-supplied policy inputs: zero network, no OCSP. Emits ACCEPT or REFUSE verdict. PS256 (RSA-PSS) support means this kernel has no faithful sync in-guest verifier today, so its zkVM compute-integrity proof is out of the ocg-p18-deterministic profile's scope: not counted as proven.",
  "declared_inputs": [
    "art-123-c2pa-manifest-validator"
  ],
  "declared_outputs": [
    "art-125-provenance-ingredient-tree-resolver"
  ],
  "kernel_digest": "sha256:e9897ef4cb8f7cf9529ef898e949895809edb037f346eb0a0557216bb3875fd1",
  "trust_label": "verify-only: callable in chains, carries no compute-proof claim (out of the §18.6 deterministic-node profile's scope)",
  "data_vintage": "2026-07-10",
  "last_validated": "2026-07-10",
  "conformance_fixtures_vendored": true,
  "compute_proof_ready": "verify_only",
  "wave": 23,
  "source_url": "https://ainumbers.co/chaingraph/art-124-content-credential-signature-verifier.html",
  "generated_at": "2026-08-15T11:12:17.704Z"
}