---
title: "SLSA Provenance Verifier"
method: POST
path: "/v1/tools/verify_slsa_provenance"
tags: ["TODO_TAGS_REVIEW"]
---

# SLSA Provenance Verifier

`POST /v1/tools/verify_slsa_provenance`

## Request

- Base URL: `https://ainumbers.co`
- URL: `https://ainumbers.co/v1/tools/verify_slsa_provenance`
- Auth: none declared

Verifies an in-toto SLSA provenance statement: validates _type (in-toto.io/Statement) and predicateType (slsa.dev/provenance), checks subject SHA-256 digest against caller-supplied artifact_digest_sha256, asserts builder.id present via runDetails.builder.id or predicate.builder.id, reports claimed_build_level 0-3. Middle stage of sbom-provenance-attestation chain.

**Tool URL:** https://ainumbers.co/chaingraph/art-136-slsa-provenance-verifier.html
**AP2/Policy Mandate export:** yes

## Request body

- object
  - `artifact_digest_sha256` unknown
  - `claimed_build_level` unknown
  - `statement` unknown

## Response `200`

Successful tool execution result

- object
  - `builder_id_present` boolean
  - `pred_ok` boolean
  - `provenance_valid` boolean
  - `slsa_build_level` integer
  - `subject_digest_match` boolean
  - `type_ok` boolean

---

[API](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite.md) · [All operations](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/llms.txt) · [OpenAPI document](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/revisions/b462e4f5bb28?raw)