PUBLIC VERIFICATION

Check a signed record.

A valid Ed25519 signature authenticates the recorded statement. For a certification bundle, the record links exact evidence digests; a bundle-only check verifies its signature, while a full package also verifies every referenced document. Neither predicts new behavior or proves safety.

Signed card · c4-architecture-diagram

{
  "schemaVersion" : "1.0",
  "skillId" : "3f42acf3-a06e-3407-8c96-1dafae9e4379",
  "slug" : "c4-architecture-diagram",
  "versionId" : "9928887f-2e18-4199-8d43-5a541c761e79",
  "sourceId" : "local-directory",
  "versionRef" : "c4-architecture-diagram",
  "contentDigest" : "sha256:f4f3ca5e319f0351ce447e4fd7c6ae71274d304537e992397ba2c8fc96a23cdf",
  "bundleDigest" : "sha256:65f270f114ced0cc3cd932f566c83f47e8a888fdd775debaf94913ed4f8624aa",
  "manifest" : {
    "name" : "c4-architecture-diagram",
    "description" : "Turn a system description into a simple diagram and clear notes about what is unknown.",
    "compatibility" : "Works in any Agent Skills-compatible harness that can format Markdown and Mermaid.",
    "allowedTools" : "Read",
    "license" : "MIT",
    "metadata" : {
      "author" : "Web3 Energy",
      "category" : "architecture",
      "tags" : "architecture,diagrams,documentation"
    }
  },
  "checks" : [ {
    "status" : "COMPLETED",
    "scannerVersion" : "1.0",
    "limitations" : [ "Static text rules only; no skill code was executed.", "Rules are heuristic and can produce false positives and false negatives." ],
    "scannerName" : "web3-energy-built-in",
    "findings" : [ ],
    "checkedAt" : "2026-10-25T20:10:39.366235844Z"
  }, {
    "status" : "COMPLETED",
    "scannerVersion" : "skill-scanner 2.3.0;expected=2.3.0;report-contract=1",
    "limitations" : [ "Cisco scanner static analysis only; LLM, cloud, runtime and sandbox analysis were not run.", "Scanner coverage is best-effort; no findings do not prove absence of risk." ],
    "scannerName" : "cisco-skill-scanner",
    "findings" : [ ],
    "checkedAt" : "2026-10-25T20:10:39.369504528Z"
  } ],
  "findings" : [ ],
  "grade" : "A",
  "listable" : true,
  "limitations" : [ "Static analysis only; no skill content was executed.", "No runtime, sandbox, network-egress, licence or task-quality check was performed." ],
  "issuedAt" : "2026-10-25T20:10:58.048559848Z",
  "signerKeyId" : "skills-prod-1",
  "signature" : "UJl3VRUDPjRBD1NarBy19CC55e30h8aAcvwhHyACrpomxYBpsb+mRkt//mlY1LgPkpoa6UR5GpHtY0feg2ZQDQ=="
}

Verify a bundle or package

Paste a signed bundle or the bundle plus its evidence documents. Bundle-only verification checks the lab signature; package verification also checks each referenced digest and evidence signature.

Use POST /api/verify for CLI verification. Public keys are listed at /api/verify/keys.

Check a signed record.

Evidence checks passed

Verify a bundle or package