Verify it yourself

Five minutes, Python 3, one pip package, no CAIN code.

1. Download the verifier, its certificate checker, the sample receipt and the forgery kit:

   for f in verify_qaas_receipt.py verify_pbft_qc_bundle.py verify-yourself-receipt.json qaas-forgeries.py qaas-kit-SHA256SUMS; do
     curl -sO https://cainstudio.online/$f; done
   sha256sum -c qaas-kit-SHA256SUMS --ignore-missing
   pip install cryptography

2. Fetch the pin from the cluster's published membership. Better: also compare it with us over a second channel.

   PIN=$(curl -s https://cainstudio.online/api/v1/quorum/status | python3 -c 'import json,sys;print(json.load(sys.stdin)["configuration_hash"])')
   echo $PIN

3. Verify the receipt with the pin:

   python3 -I verify_qaas_receipt.py verify-yourself-receipt.json --pin "$PIN"
   # ... NOTARIZED   (exit 0)

4. Run it without the pin and see it refuse:

   python3 -I verify_qaas_receipt.py verify-yourself-receipt.json
   # NOT VERIFIED: no pin ...   (exit 3)

5. Run the 17 forgeries:

   python3 -I qaas-forgeries.py verify-yourself-receipt.json "$PIN"
   # 17 new forgeries, 17 rejected; control OK   (exit 0)

6. Write your own forgery. If you build a receipt that verifies pinned for a digest the cluster never notarized, tell us: that is the claim this whole product rests on.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.