D1: owner-self-signed offline receipts — seal with the install key, one verifier, three evidence levels by DealAppSeo · Pull Request #681 · DealAppSeo/trustshell

feat(verify): owner-self-signed offline receipts — seal with the install key, one verifier, three evidence levels (#679 D1)

DealAppSeo

and

claude

committed

74c8661

feat(cli): `trustshell sign-receipt` — emit an owner-self-signed receipt from the shell, so emit→verify is one pipe (#679 D1)

DealAppSeo

and

claude

committed

78286bf

D1: document sign-receipt + exercise it in the stranger walk

DealAppSeo

and

claude

committed

253ed5a

D5: skeptic's receipt challenge — the attack matrix against the real CLI

DealAppSeo

and

claude

committed

de61ccc

D4: `trustshell demo` + a 10-step quickstart — the offline loop in one command

DealAppSeo

and

claude

committed

a8cebe2

fix(verify): rename the top evidence rung ISSUER_ATTESTED — a pinned non-owner key is not independence (#681)

DealAppSeo

and

claude

committed

6e5de78

test(verify): cross-verifier key isolation + honest replay-vs-transplant distinction (#681)

DealAppSeo

and

claude

committed

73b80a6

Navigation Menu

Repository navigation

D1: owner-self-signed offline receipts — seal with the install key, one verifier, three evidence levels - #681

D1: owner-self-signed offline receipts — seal with the install key, one verifier, three evidence levels#681
DealAppSeo merged 7 commits into
mainfrom
claude/run-signed-receipt

Commits on Nov 7, 2026

feat(verify): owner-self-signed offline receipts — seal with the install key, one verifier, three evidence levels (#679 D1)

feat(cli): `trustshell sign-receipt` — emit an owner-self-signed receipt from the shell, so emit→verify is one pipe (#679 D1)

D1: document sign-receipt + exercise it in the stranger walk

D5: skeptic's receipt challenge — the attack matrix against the real CLI

D4: `trustshell demo` + a 10-step quickstart — the offline loop in one command

fix(verify): rename the top evidence rung ISSUER_ATTESTED — a pinned non-owner key is not independence (#681)

test(verify): cross-verifier key isolation + honest replay-vs-transplant distinction (#681)