Public proof network

Bind and sign one claimant self-report

Requires publisher_terms_accepted=true, then verifies the signed challenge and either DNS TXT control or the exact binding document in a specified public GitHub repository commit and persists a signed EXTERNALLY_BOUND_SELF_REPORT. The publisher confirms subject control, publication rights and the correction, expiry, revocation and takedown rules in the Acceptable Use Policy. Subject binding and report integrity are verified. Claimant execution remains SELF_REPORTED_OUTPUTS_ONLY: the result is non-authorizing, is not an independently executed conformance result, audit or certification, and does not count as a user, customer or installation. Hosted MandateShield sandbox runs cannot enter this network.

post/api/v1/proof-network/attestations

Request

  • Base URL: https://mandateshield.com
  • URL: https://mandateshield.com/api/v1/proof-network/attestations
  • Auth: none required

Request body

challenge_tokenstring required
repository_commitstring

Required only for a GitHub-repository challenge, forbidden for an HTTPS-domain challenge, and required to equal the claimed repository's current default-branch HEAD at verification time.

publisher_terms_acceptedunknown required

Response

Existing idempotent proof returned

format'application/mandateshield-proof-attestation+json' required
proof_idstring required
attestation_type'EXTERNALLY_BOUND_SELF_REPORT' required
issuer_role'BINDING_NOTARY' required
subjectobject required
hosted_sandboxunknown required
non_authorizingunknown required
counts_as_userunknown required
issued_atstring date-time required
proof_uristring uri required
caveatstring required

Must state that MandateShield verified external subject binding and report integrity only, not claimant execution, certification, audit or real-world use.

persistedboolean
createdboolean

Changes

No recorded changes to this operation across all 1 revision of this API.