Verification

Verify an exported Decision Record

Verifies Decision Record hashes and signatures without requiring a hosted ledger lookup. A verified=true authenticity result requires a server-configured Decide receipt key or HMAC secret; a public key supplied in the same request is used only for integrity diagnostics and is not a trust anchor.

post/api/decision/verify

Request

  • Base URL: https://www.decide.fyi
  • URL: https://www.decide.fyi/api/decision/verify
  • Auth: none required

Request body

inputobject
requestobject
public_keystring

Optional Ed25519 public key for integrity diagnostics. Because it arrives with the record, it is not a hosted-verifier trust anchor and cannot make authenticity_valid true.

Response

Verification result

okboolean required
decision_idstring
sourcestring
verifiedboolean required

True only when both integrity_valid and authenticity_valid are true.

integrity_validboolean

True when the supplied hashes, signature bytes, fingerprints, and optional input links are internally consistent.

authenticity_validboolean

True when the receipt signature validates against a trusted server, registry, pinned-key, or HMAC trust anchor.

key_source'public_key' | 'key_registry' | 'environment' | 'request_body' | 'record' | 'none'

Where the verification key came from. request_body and record are diagnostic sources, not authenticity trust anchors.

checksobject required
expectedobject
actualobject
record_hashstring nullable
receipt_hashstring nullable

Changes

No recorded changes to this operation across all 1 revision of this API.