aqta-verify-receipt
Offline verifier for Seal receipts (ATTESTATION-v1).
Seal signs the model call at runtime. This package checks that signature without contacting Aqta. No account. Same algorithm as the npm package.
30-second check
pip install aqta-verify-receipt
aqta-verify-receipt receipt.json \
--key gUoUhIvptKAoLTnry3VrDtOQEWggGQveLrHFVrfNqmE
Or pipe:
curl -sS https://api.aqta.ai/r/YOUR_RECEIPT_ID | aqta-verify-receipt - \
--key gUoUhIvptKAoLTnry3VrDtOQEWggGQveLrHFVrfNqmE
ok + exit 0 means the Ed25519 signature verifies against the pinned key.
Production key id: aqta-att-0a18c7c16bc18a12
(/v1/attestation/public-key).
Pin that string. Do not re-fetch it inside a verify loop.
Library
from aqta_verify_receipt import verify_receipt, fetch_published_public_key
# Once per environment: fetch, then pin somewhere you control.
trusted = fetch_published_public_key()
result = verify_receipt(receipt, trusted_public_key=trusted)
if not result.valid:
raise ValueError(result.reason)
CLI
aqta-verify-receipt <file|-> --key <base64url> [--no-strict] [-q]
aqta-verify-receipt <file|-> --integrity-only [--no-strict] [-q]
Pinning is required by default. Without --key, pass --integrity-only
(embedded key only; anyone can self-sign; result is marked untrusted).
Dependencies
cryptography (>= 42) for constant-time Ed25519. Nothing else.
What this is not
Not a governance dashboard. Not a cost router. A small verifier for one signed model-call receipt.
Licence
Apache-2.0. Aqta Technologies Limited.
If you implement or cite the ATTESTATION-v1 format itself, credit under CC-BY-4.0: see the repo CITATION.cff.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file aqta_verify_receipt-1.0.7.tar.gz.
File metadata
- Download URL: aqta_verify_receipt-1.0.7.tar.gz
- Upload date:
- Size: 12.5 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
fa6dde50f20253fff2598be3eaab0a440a2f3c655d1fa8952ca91c796058997f
|
|
| MD5 |
b731f1e93b9ee5af1fbd0b8cf9f6afc8
|
|
| BLAKE2b-256 |
39bf8de70a5adce091e6cfec3848ce0ca84ea40c7119e660d4d26a1ee2408d82
|
Provenance
The following attestation bundles were made for aqta_verify_receipt-1.0.7.tar.gz:
Publisher:
release-pypi.yml on Aqta-ai/attestation-spec
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
aqta_verify_receipt-1.0.7.tar.gz -
Subject digest:
fa6dde50f20253fff2598be3eaab0a440a2f3c655d1fa8952ca91c796058997f - Sigstore transparency entry: 2280008348
- Sigstore integration time:
-
Permalink:
Aqta-ai/attestation-spec@e6ea8da1e25f4bff77f6bf8d5d1956c3b6a1f46f -
Branch / Tag:
refs/tags/pyverify-v1.0.7 - Owner: https://github.com/Aqta-ai
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release-pypi.yml@e6ea8da1e25f4bff77f6bf8d5d1956c3b6a1f46f -
Trigger Event:
push
-
Statement type:
File details
Details for the file aqta_verify_receipt-1.0.7-py3-none-any.whl.
File metadata
- Download URL: aqta_verify_receipt-1.0.7-py3-none-any.whl
- Upload date:
- Size: 10.3 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
046ffd0b23a72b0d3bc7c7dc4c7c199bacf43d6e9a3f51eebf070b53ce1a95cb
|
|
| MD5 |
001b85c29e51aac36ea1730d7f91c3b6
|
|
| BLAKE2b-256 |
9b7a7aea03f754a05b42dc2eb77c03bd4a01d0445691d79b00064b2c0ed5ba0d
|
Provenance
The following attestation bundles were made for aqta_verify_receipt-1.0.7-py3-none-any.whl:
Publisher:
release-pypi.yml on Aqta-ai/attestation-spec
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
aqta_verify_receipt-1.0.7-py3-none-any.whl -
Subject digest:
046ffd0b23a72b0d3bc7c7dc4c7c199bacf43d6e9a3f51eebf070b53ce1a95cb - Sigstore transparency entry: 2280008402
- Sigstore integration time:
-
Permalink:
Aqta-ai/attestation-spec@e6ea8da1e25f4bff77f6bf8d5d1956c3b6a1f46f -
Branch / Tag:
refs/tags/pyverify-v1.0.7 - Owner: https://github.com/Aqta-ai
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release-pypi.yml@e6ea8da1e25f4bff77f6bf8d5d1956c3b6a1f46f -
Trigger Event:
push
-
Statement type:
