Verification

Signed envelope fixtures for fail-closed integrations

Complete artifacts with real production signatures — valid, expired, tampered, and unknown-signer cases — each with the exact canonical string its signature covers, the exact desk call to make, and the verdict it returns. Every fixture is re-verified against the live desk before serving. Pin the set digest; build and test an integration without paying anything.

get/api/conformance/v1/fixtures

Request

  • Base URL: https://scvd.store
  • URL: https://scvd.store/api/conformance/v1/fixtures
  • Auth: none required

Headers

If-None-Matchstring

Send a prior ETag (SHA-256 of exact response bytes). Unchanged content returns 304 with no body.

Response

OK

what_this_isstring required
versionstring required
fixture_set_digeststring required
digest_rulestring required

How to recompute the digest above from the fixtures below, without asking us.

how_to_integrate_fail_closedstring[]

A conformance check wired to pass when it errors is worse than no check.

Changes

No recorded changes to this operation across all 1 revision of this API.