Agent Audit Trail — reference verifier
draft-sharif-agent-audit-trail-04 · offline, independent verification · pip install aat-verify
session sess-1
merkle_root 2eccf082ff82bc6a0ca2d56ebd7817d1223be217f36d3e1153b34a4e1e450672
6 records: signed, chained, batched
- PASS
Hash-chain integrity (6 records)
- PASS
Signatures verify (ES256 / ML-DSA-65 / hybrid)
rec4: hybrid ES256+ML-DSA-65 OK
- PASS
Independent recording on consequential actions
rec2: independent recorder
- PASS
Trust downgrades are attributable
rec3: downgrade by urn:risk
- PASS
Timestamps monotonically non-decreasing
- PASS
Merkle inclusion proofs (RFC 6962)
6 leaves -> root 2eccf082ff82bc6a...
- PASS
Epoch completeness (no missing/truncated records)
ep-1: all 6 leaves present
After tampering
TAMPER DETECTEDattacker changed a $250,000 payment to $5
- FAIL
Hash-chain integrity (6 records)
- FAIL
Signatures verify (ES256 / ML-DSA-65 / hybrid)
rec2: ES256 verify failed; rec4: hybrid ES256+ML-DSA-65 OK
- PASS
Independent recording on consequential actions
rec2: independent recorder
- PASS
Trust downgrades are attributable
rec3: downgrade by urn:risk
- PASS
Timestamps monotonically non-decreasing
- FAIL
Merkle inclusion proofs (RFC 6962)
6 leaves -> root 2eccf082ff82bc6a...
- PASS
Epoch completeness (no missing/truncated records)
ep-1: all 6 leaves present
SHA-256 hash-chainES256 (ECDSA P-256)
ML-DSA-65 (FIPS 204)hybrid PQC signingsigner_kid (RFC 7638)
RFC 6962 Merkle batchtree_size completenessattributable downgrade