audit-witness

Offline verifier for MeshGuard audit export bundles.

The verifier validates:

1. Event canonical hash.
2. Merkle inclusion proof.
3. Tenant root signature.
4. Global root signature.
5. Witness proof metadata.

Signed bundle verification supports hmac-sha256 keyrings by default and Ed25519 when installed with the crypto extra.

Development

python -m pip install -e ".[dev]"
pytest