Verify a Decision Dossier — no account required

Runs the real Ed25519 verification against the published public JWKS — the same check anyone can reproduce offline with @decionis/verify — and returns a share-safe, masked projection of the dossier. The ?sig capability comes from a dossier's verification envelope and only gates access (it keeps dossier ids from being enumerated); the signatures prove authenticity. Every capability failure collapses to the same 404 — no oracle about which check failed.

get/v1/public/decision-dossiers/{dossier_id}/verify

Request

  • Base URL: https://api.decionis.com
  • URL: https://api.decionis.com/v1/public/decision-dossiers/{dossier_id}/verify
  • Auth: none required

Path parameters

dossier_idstring uuid required

Query parameters

sigstring required

The share-link capability from a dossier's verification envelope. An access gate, not proof of authenticity — the Ed25519 signatures in the proof bundle are what prove the dossier. A missing or wrong value returns the same 404 as an unknown dossier.

expstring

Expiry (epoch seconds) of a v2 org-scoped share link. Bound into the signature — stripping or editing it invalidates the link. Absent only on legacy expiry-less links, which deployments may refuse.

Response

Verification result with a masked public dossier projection

servicestring required
verifiedboolean required

Compatibility result. Protocol 1.0 artifacts retain their original share-link verification semantics. When an Ed25519 proof bundle is present this equals its cryptographic signature result. This field is not an execution-eligibility statement.

cryptographically_verifiedboolean required

True only when every listed proof artifact verified against the published Ed25519 JWKS. This does not by itself establish execution eligibility.

execution_eligibleboolean required

True only for a cryptographically valid Protocol 1.1 authoritative ALLOW whose required execution-authority artifacts and semantic commitments are proof-covered.

generated_atstring date-time required
verification_statusobject required

Per-check breakdown — signature, policy snapshot, ledger chain, proof bundle — each with verified, severity, and detail.

proof_bundleobject required

Ed25519 verification detail, the JWKS URL, and a self_verify command anyone can run offline with @decionis/verify.

dossierobject required

Share-safe public projection. Categorical tokens pass; caller- minted values and identifiers are masked server-side; the policy snapshot is proven and pinned by hash but never shipped.

integrityobject required
verificationobject

Fresh expiring share links for this dossier (v2, org-scoped).

signal_traceobject[]
overridesobject
messagestring

Example response

{
  "service": "decionis"
}

Changes

No recorded changes to this operation across all 1 revision of this API.