vm-core/testvectors/proofbundle/README.md

VaultMesh ProofBundle Conformance Test Pack

This directory contains example ProofBundle JSON files used to validate implementations of the vm_verify_proofbundle.py verifier.

It is designed for air-gapped, offline verification: you can unpack this folder on a laptop with Python installed and run the tests locally.

1. Contents

• proofbundle-valid.json A known-good ProofBundle with a contiguous hash chain. The verifier MUST report success.

• proofbundle-tampered-body.json A bundle where the body of one receipt was modified without updating its root_hash. The verifier MUST detect a hash mismatch.

• proofbundle-tampered-root.json A bundle where a receipt's root_hash is incorrect. The verifier MUST detect a hash mismatch.

• proofbundle-broken-chain.json A bundle where a previous_hash does not match the prior receipt's root_hash. The verifier MUST report a broken chain.

2. Prerequisites

• Python 3.10+
• The blake3 package:

pip install blake3

• The verifier script on your machine:

vm_verify_proofbundle.py

(From the VaultMesh distribution under burocrat/app/tools/.)

3. How to run

From this directory:

python3 vm_verify_proofbundle.py proofbundle-valid.json
python3 vm_verify_proofbundle.py proofbundle-tampered-body.json
python3 vm_verify_proofbundle.py proofbundle-tampered-root.json
python3 vm_verify_proofbundle.py proofbundle-broken-chain.json

4. Expected results

File	Expected Exit	Expected Outcome
proofbundle-valid.json	0	OK - chain is contiguous and valid
proofbundle-tampered-body.json	1	HASH_MISMATCH detected
proofbundle-tampered-root.json	1	HASH_MISMATCH detected
proofbundle-broken-chain.json	1	BROKEN_CHAIN or equivalent error

Exact wording of error messages MAY vary across implementations, but:

• Any hash mismatch MUST cause a non-zero exit code.
• Any broken chain MUST cause a non-zero exit code.

5. Specification Reference

For the formal, normative definition of ProofBundle and verification rules, see:

• VAULTMESH-PROOFBUNDLE-SPEC.md (Conformance Tests section)
• VAULTMESH-STANDARDS-INDEX.md (for version matrix and related artifacts)

---

VaultMesh ProofBundle Conformance Test Pack v1.0 Sovereign Infrastructure for the Digital Age