Attestation

AttestationVerifier

import { AttestationVerifier } from "@axiom-infra/core";

const verifier = new AttestationVerifier();
const verdict = await verifier.verify(evidence, context, options);

createVerifier()

import { createVerifier } from "@axiom-infra/core";

const verifier = createVerifier();

VerificationOptions

• expectedMeasurement (string) — expected enclave measurement
• expectedConfigHash (string) — expected configuration hash
• maxAge (number) — max age in ms (default 5 minutes)
• validateSignatureChain (boolean) — default true
• mode ("strict" | "permissive")
• nonce (string) — reserved for future freshness binding

VerificationVerdict

• valid
• platform
• measurement
• claims
• errors
• warnings
• verifiedAt

Convenience methods

• verifyEvidenceOnly() — validate evidence format before full verification
• quickVerify() — strict verification with minimal options

Binding formula

report_data = SHA-256(session_id || config_hash || output_hash || timestamp)

Notes

• Simulator evidence triggers warnings for platform authentication
• expectedMeasurement should come from a trusted registry

---

Prev: Axiom API | Next: Types