verify

Verify check manifest integrity

Verify the signed manifest for a completed check.

Confirms the signed fields haven't changed since signing.

Public endpoint — no authentication required.

Two-step verification:

  1. Signature authenticity — proves the manifest wasn't forged
  2. Data integrity — proves the database wasn't mutated since signing

Returns {valid: true, ...} on success, or {valid: false, reason: "..."} on failure.

Rate limit: 60/minute per IP

get/verify/{check_id}

Request

  • Base URL: https://api.trueight.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.trueight.com/verify/{check_id}
  • Auth: none declared

Path parameters

check_idstring required

Response

Verification result — check valid field

validboolean

Always true on successful verification

checkIdstring required

Verified check ID

signedAtstring required

When the manifest was signed (ISO 8601)

kidstring required

Signing key ID

executedTier'lookup' | 'consensus' | 'quick' | 'full'

Agent pipeline tiers — determines depth and cost.

pipelineFingerprintstring nullable

SHA-256 fingerprint of pipeline model configuration (first 12 chars)

Example response

{
  "checkId": "abc-123",
  "executedTier": "full",
  "kid": "k1",
  "pipelineFingerprint": "a1b2c3d4e5f6",
  "signedAt": "2026-03-10T14:31:25Z",
  "valid": true
}

Changes

No recorded changes to this operation across all 1 revision of this API.