Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

https://github.com/kojibai/receiz_offline_verifier

Public, offline verifier for a receiz.
https://github.com/kojibai/receiz_offline_verifier

cryptography deterministic forensics groth16 integrity kai-klok offline offline-proof png receiz sha256 verifier webcrypto zk zk-proofs zk-snarks

Last synced: 21 days ago
JSON representation

Public, offline verifier for a receiz.

Awesome Lists containing this project

README 

          
# Receiz Offline Verifier



Verify a file offline. Proof is in the file.



Current release: `v80.0.0`



## What changed in v80.0.0

- Current release/docs surfaces are aligned to `v80.0.0`.

- Published the canonical `v80.0.0` Major Stable Release note at [docs/releases/v80.0.0.md](docs/releases/v80.0.0.md).

- Published the release-scoped product-truth freeze at [docs/releases/v80.0.0-product-truth.md](docs/releases/v80.0.0-product-truth.md).

- Published the release checklist at [docs/releases/v80.0.0-checklist.md](docs/releases/v80.0.0-checklist.md).

- Published the release process at [docs/releases/v80.0.0-process.md](docs/releases/v80.0.0-process.md).

- `v80.0.0` preserves `v70.0.0`, `v74.0.0`, `v75.0.0`, `v76.0.0`, `v77.0.0`, and `v78.0.0` baseline law while locking verified-truth-first identity, canonical profile truth, proof-native wallet/market causality, World revenue loops, Public Proof registry behavior, Creator OS production, Signal Cards as owned Receiz assets, Vault export portability, conformance/status visibility, and runtime/PWA continuity.

- The `v64.0.0` value-loop invariants remain in force.

- No new database migration is required by this documentation cut.

- Current shipped verifier, studio, and settlement entrypoints now display `v80.0.0`.

- Root package metadata now resolves cleanly to `v80.0.0`.

- Verifier semantics remain unchanged relative to `v60.0.0`.

- Core verifier outcomes remain file-authoritative, deterministic, and fail-closed.



## Live Conformance



  

    Powered by Receiz

    Verification conformance badge

    Settlement conformance badge

    Identity conformance badge

    Issuance conformance badge

    Interoperability conformance badge

    World conformance badge

  



The repo-local conformance hub at [docs/conformance/README.md](docs/conformance/README.md) tracks the latest vendored conformance snapshot in this repository. It includes live badge surfaces, current imported results, and suite-by-suite requirement coverage docs for the currently imported suites; the broader `v80.0.0` release is documented in the release note and can be vendored here on the next snapshot refresh.



## Release train highlights (v14 -> v80)

- `v14.0.0`: UI release marker advanced to `v14.0.0`; app entrypoint rename started (`receiz-offline-verifier.html` -> `offline-verifier.html`).

- `v15.0.0` / `v15.5.0`: runtime/doc route references aligned to `/offline-verifier.html`; release markers advanced.

- `v16.0.0`: wording shifted from "original/sealed artifact" language to consistent "file/sealed file" language.

- `v17.0.0`: anchor derivation + cross-check hardening shipped.

- `v18.0.0`: Signature v3 offline verification + key pinning model shipped.

- `v19.0.0`: Signature v3 key policy shifted to pulse-based lifecycle enforcement.

- `v20.0.0`: added footer download action for the offline verifier page.

- `v21.0.0`: strict verification gating requires signature, anchor context, and real `g16:` Groth16 proof artifacts.

- `v22.0.0`: release marker and docs alignment with no policy/runtime behavior change.

- `v23.0.0`: Signature v4 trust-chain verification and trusted-signature policy expansion (`signatureV3` or `signatureV4`).

- `v24.0.0`: trusted-signature gating narrowed to `signatureV4` and v4 root-key pin set expanded.

- `v26.0.0`: release-marker/docs alignment only; verification semantics unchanged from `v24`.

- `v27.0.0`: release-marker/docs alignment only; verification semantics unchanged from `v26`.

- `v28.0.0`: release-marker/docs alignment only; verification semantics unchanged from `v27`.

- `v29.0.0`: release-marker/docs alignment only; verification semantics unchanged from `v28`.

- `v30.0.0`: release/docs alignment plus public standards, governance, and release-note expansion; verifier semantics unchanged from `v29`.

- `v40.0.0`: release/docs alignment for the broader operational trust-platform release, including offline proof, wallet/settlement, public artifact delivery, admin/business rails, and world-runtime framing.

- `v45.0.0`: release/docs alignment for the production Public Twin and World consolidation release, including photoreal live stages, owned-runtime rendering, deterministic trail bundles, and hardened calendar/booking flows.

- `v46.0.0`: release/docs alignment for the locked-surface product-truth release, including richer original/document viewing, a stronger verified-original player, authority-aware Public Twin photoreal behavior, and explicit release-freeze framing.

- `v47.0.0`: release/docs alignment for the governed trust-surface release, including first-class original/document delivery, stronger verified-player continuity and sharing, stricter storage/media freshness, more authority-aware Public Twin/world behavior, and explicit version-truth governance.

- `v47.0.1`: release/docs alignment for the profile stability patch; verifier semantics remain unchanged from `v47.0.0`.

- `v47.2.0`: release/docs alignment for the Business custom-domain root-routing and DNS setup-surface patch; verifier semantics remain unchanged from `v47.0.0`.

- `v47.3.0`: release/docs alignment for the custom-domain continuity and sign-in experience release, including auth-bridge continuity on verified business domains, email-first fallback in likely embedded browsers, and trusted-host first-paint hero media behavior; verifier semantics remain unchanged from `v47.0.0`.

- `v47.4.0`: release/docs alignment for the native business-entitlement and embedded-surface continuity release, including Business-preserving session surfaces, Receiz calendar scheduling continuity, and Receiz-hosted embedded Stripe checkout; verifier semantics remain unchanged from `v47.0.0`.

- `v47.5.0`: release/docs alignment for the world revenue-operations release, including explicit revenue skills, multi-channel outbound opportunity lanes, owner-side playbooks, proof-first kits, action-card embeds, booking confirmation packs, and call closeout rails; verifier semantics remain unchanged from `v47.0.0`.

- `v47.6.0`: release/docs alignment for the world command-center and contacts-operations release, including the atlas-first `/world` shell, concierge twin-run tracking, a standalone `/contacts` CRM surface, safer outreach persistence rules, and Stripe-backed checkout completion truth; verifier semantics remain unchanged from `v47.0.0`.

- `v47.7.0`: release/docs alignment for the durable contacts production release, including migration-backed contact persistence, historical relationship backfill, live person timelines, portable import/export, and locked release-governance surfaces; verifier semantics remain unchanged from `v47.0.0`.

- `v47.8.0`: release/docs alignment for the contacts continuity hardening release, including guest-contact materialization, public-twin and calendar continuity, mobile identity visibility, and guest-thread follow-up continuity; verifier semantics remain unchanged from `v47.0.0`.

- `v48.0.0`: release/docs alignment for the operator-surface release, including the operator-first contacts shell, durable `linked_user_id` merge upgrades, and a cleaner authoritative mobile world atlas; verifier semantics remain unchanged from `v47.0.0`.

- `v50.0.0`: release/docs alignment for the world revenue operating system release, including durable contacts CRM, live world command surfaces, concierge-run lead sourcing, campaign persistence, scheduled autopilot, provider telemetry, truthful rail readiness, reply handling, and revenue attribution; verifier semantics remain unchanged from `v47.0.0`.

- `v51.0.0`: release/docs alignment for the product-ladder and operator-truth release, including public plan renaming to Authorship / Business / Automation, Free-to-Enterprise ordering, consistent entitlement copy, and carried-forward Contacts/world truth hardening; verifier semantics remain unchanged from `v50.0.0`.

- `v52.0.0`: release/docs alignment for the governed market release, including deterministic quote execution, replayable quote evidence, partial share-certificate custody, first-class market conformance, and lighter premium market runtime behavior; verifier semantics remain unchanged from `v51.0.0`.

- `v52.5.0`: release/docs alignment for the market hardening release, including deterministic quote math, persisted quote evidence, bounded spread/pressure behavior, partial share-certificate custody, first-class market conformance, lighter premium runtime, contextual market media, inline launch, and official market share surfaces; verifier semantics remain unchanged from `v52.0.0`.

- `v53.0.0`: release/docs alignment for the public market product-system release, including public market data routes, persisted conformance history, stricter prediction resolution, touch-safe market/player flows, stronger proof metadata, proper passkey account attachment, first-class Enterprise handling, simpler public entry surfaces, and `Ed25519` release attestation; verifier semantics remain unchanged from `v52.0.0`.

- `v54.0.0`: release/docs alignment for the broader operating-system release, including the expanded public product map, the dedicated Business surface, the admin command deck, Stripe-to-ledger wallet transparency, shared session bootstrap, deterministic market-preview pricing, twin continuity across profile/artifact/player handoffs, and deterministic Kai sigil rendering; verifier semantics remain unchanged from `v53.0.0`.

- `v55.0.0`: release/docs alignment for the guided owner-setup release, including sticky `/profile` activation, sealed profile media, explicit world-avatar freshness, shared stable-route market/player continuity, and canonical performance route grouping; verifier semantics remain unchanged from `v54.0.0`.

- `v55.1.0`: release/docs alignment for the continuity-and-execution release, including reusable profile truth, deterministic route handoff, passkey-first buy continuation, exact-USD non-entitled settlement, position-aware sell presentation, and tighter live-player continuity; verifier semantics remain unchanged from `v55.0.0`.

- `v56.0.0`: release/docs alignment for the canonical continuity release cut, including lockstep version surfaces, guarded logged-in world hydration, entitlement-aware concierge polling, and fresh-account analytics schema-drift hardening; verifier semantics remain unchanged from `v55.1.0`.

- `v57.0.0`: release/docs alignment for the route-coherence, certificate-custody, and market-conformance release, including canonical managed-owner routing, world/market fast-entry truth reuse, certificate-native custody/history, and coherent market balances and inventory across certificate and profile-visibility mutations; verifier semantics remain unchanged from `v56.0.0`.

- `v58.0.0`: release/docs alignment for the authoritative-market and release-surface coherence cut, including authoritative signed-in market first paint, shared wallet/chart-buy live hydration, lean deterministic market transport, live tracked-position semantics, and unified release-surface version truth; verifier semantics remain unchanged from `v57.0.0`.

- `v60.0.0`: release/docs alignment for the major stable recap cut across `v50.0.0` through `v60.0.0`, including live proof and twin at the front door, stronger canonical original upload/download recovery, explicit profile-ready twin portrait publishing, tighter compact-device wallet and certificate framing, and unified `v60.0.0` release truth; verifier semantics remain unchanged from `v58.0.0`.

- `v60.1.0`: release/docs alignment for the continuity-and-market-proof cut on top of `v60.0.0`, including holder-aware public market witness truth, compact market-desk polish, twin shell continuity without late visible promotion, lighter public-profile route assembly, and deterministic market sigil hydration; verifier semantics remain unchanged from `v60.0.0`.

- `v61.0.0`: release/docs alignment for the governed historical-continuity and runtime-discipline cut on top of `v60.0.0`, including the governed pre-v4 historical cohort, deterministic market exits, stricter settled-shell runtime boundaries, published operating standards, and unified `v61.0.0` release truth; verifier semantics remain unchanged from `v60.0.0`.

- `v64.0.0`: release/docs alignment for the complete value-loop cut, including Settlement as proof-native liquid value, funded Reserve as the external-conversion lane, Reserve-only notes and wire transfer, Reserve-first sends and buys, funded/unfunded market sale splits, buyer-funded certificates, and canonical value-loop invariants; verifier semantics remain unchanged from `v60.0.0`.

- `v66.0.0`: release/docs alignment for the local proof continuity cut, including local identity roots, verified-register-backed proof authority, deterministic state preservation, append-only history, compact local memory, sync as propagation, explicit verified-snapshot persistence, and local twin register projection; verifier semantics remain unchanged from `v60.0.0`.

- `v70.0.0`: release/docs alignment for the public alpha cut, including one-click Receiz ID entry, canonical `/` profile truth, complete Settlement/Reserve value-loop causality, local-first/server-always recovery, route-preserving stale-runtime recovery, live twin identity locking, proof-sealed world trail bundles, and the `v70.0.0` invariant register; verifier semantics remain unchanged from `v60.0.0`.

- `v72.0.0`: release/docs archive for the stable continuity cut, including actor-scoped route warmth clearing on account switch and compact mobile Live Twin face-lock overlay fit; verifier semantics remain unchanged from `v60.0.0`.

- `v73.0.0`: release/docs alignment for the ownership, vault, and continuity cut, including business account ownership, receipt provenance, vault portability, account brain proof detail, Offline Verifier authority navigation, and bounded world twin fit contracts; verifier semantics remain unchanged from `v60.0.0`.

- `v74.0.0`: release/docs alignment for the Receiz Key, identity artwork, and profile media cut, including sovereign Receiz Key restore, deterministic profile identity artwork, PBI-signed identity artifacts, stable profile creation truth, long-form originals, attached-link preservation, video derivatives, sold-position continuity, and portable profile state import; verifier semantics remain unchanged from `v60.0.0`.

- `v75.0.0`: release/docs alignment for the local proof, backup sign-in, market continuity, and Explore cut, including local-first Receiz ID proof, durable account bindings, Identity Record / Seal / Receiz Key restore parity, old-browser backup sign-in, restored-account route authority, profile identity downloads, Plans / Upgrade parity, market snapshot continuity, stable market navigation, and Explore mobile packaging; verifier semantics remain unchanged from `v60.0.0`.

- `v76.0.0`: release/docs alignment for the World Agent revenue loop, Public Proof registry, Market Twin mandate safety, wallet settlement correctness, and expanded public/developer status inventory; verifier semantics remain unchanged from `v60.0.0`.

- `v77.0.0`: release/docs alignment for Signal Circuit, verified Signal Cards, Signal Vault and packs, Signal Pack Foundry, public conformance assurance, Creator OS, creator wallet metering, managed launch, Vault sealed downloads, old-Safari Signature V4 document sealing, runtime recovery, market quote batching, and wallet/profile continuity; verifier semantics remain unchanged from `v60.0.0`.

- `v78.0.0`: release/docs alignment for Signal Card World ownership, synced Vault discovery, sealed Vault Card export, explicit mobile/PWA download intent, transfer packages, Signal Arena, auction wallet holds, public Signal Circuit and Exchange routes, conformance source repair, dashboard first paint, service-worker/PWA continuity, value-loop copy, and release-worker coherence; verifier semantics remain unchanged from `v60.0.0`.

- `v80.0.0`: release/docs alignment for the major stable release, including verified-truth-first identity, canonical profile truth, wallet/market funded causality, World revenue loops, Public Proof registry behavior, Creator OS production, Signal Cards as owned Receiz assets, Vault export portability, public conformance/status visibility, and runtime/PWA continuity; verifier semantics remain unchanged from `v60.0.0`.



## Supported artifact inputs (v60)

1. PNG artifact containing exactly one `receiz.proof_bundle` text chunk.

2. PDF artifact containing exactly one embedded Receiz proof object (`/Type /ReceizProof` + `/ProofBundle`).

3. SVG artifact with exactly one embedded Receiz proof metadata attribute (with trailer-proof fallback).

4. JSON artifact with exactly one embedded Receiz JSON whitespace proof channel (with trailer-proof fallback).

5. Trailer-sealed artifact ending with one Receiz trailer payload.

6. `.receizbundle` container (`kind: receiz.bundle.v1`).

7. Sealed package payloads provided as ZIP or multi-file folder-style selections (manifest-driven verification path).



## Primitive contract (what "Verified" means)

A file is verified only if the verifier can prove integrity from bytes (plus optional integration-supplied path input):

- proof bundle payload is found exactly once for the selected format

- proof bundle decoding succeeds

- canonical field invariants pass

- artifact binding hash matches normalized basis bytes

- trusted signature checks pass (`signatureV4` must verify)

- anchor context is present (explicit or derived) and matches bundle code/pulse

- real `g16:` Groth16 proof artifacts are present and verify against digest/public-signal constraints

- if an optional path is supplied, it matches an accepted embedded canonical path



## Runtime notes

- The verifier is a static HTML app.

- Verification logic runs client-side in browser JavaScript.

- Signature v4 verification uses WebCrypto Ed25519 verification.

- Trusted-signature outcomes are fail-closed:

  - any present invalid `signatureV4` payload fails verification

  - unavailable present `signatureV4` fails verification

  - missing `signatureV4` fails verification

- Signature policy validates bundle `kaiPulseEternal` against pinned Signature v4 root-key lifecycle windows (`activeFromPulse` / `retiredAtPulse`).

- Signature v4 validates a device certificate chain rooted in pinned v4 root keys.

- `signedAtMs` remains required in signature payload shape and v4 enforces certificate issuance/expiry bounds against `signedAtMs`.

- Groth16 checks require `zkPoseidonHash`, `groth16Proof`, and `groth16ProofDigest`.

- Only real `g16:` Groth16 payloads are accepted.

- The default `v60` UI does not prompt for manual `/v/...` path input; integrations can still supply it.



## Quick start (local)



### Option A: Open directly

Open [site/index.html](site/index.html).



### Option B: Serve locally (recommended)

```bash

cd site

python3 -m http.server 8080

# then open http://localhost:8080

```



## Deploy

Deploy the `site/` directory to any static host.



Required runtime assets for `v60`:

- `index.html`

- `offline-verifier.html` (if served as an alternate entry path)

- `sw.js` (optional, for service worker warm behavior)



Note: Signature/Groth16 verification runtime and pinned key material are embedded in the shipped HTML entrypoints.



## Schemas

Machine-readable schemas are provided in [docs/schemas](docs/schemas):

- [receiz-proof-bundle.schema.json](docs/schemas/receiz-proof-bundle.schema.json)

- [receiz-anchor-bundle.schema.json](docs/schemas/receiz-anchor-bundle.schema.json)

- [receiz-bundle-envelope.schema.json](docs/schemas/receiz-bundle-envelope.schema.json)



## Repository layout

- [docs/README.md](docs/README.md): documentation map for `v80.0.0`.

- [docs/releases/v80.0.0.md](docs/releases/v80.0.0.md): canonical Major Stable Release note for `v80.0.0`.

- [docs/releases/v80.0.0-product-truth.md](docs/releases/v80.0.0-product-truth.md): `v80.0.0` product-truth freeze document.

- [docs/releases/v80.0.0-checklist.md](docs/releases/v80.0.0-checklist.md): release-prep checklist and additional gates for `v80.0.0`.

- [docs/releases/v80.0.0-process.md](docs/releases/v80.0.0-process.md): release-prep process for `v80.0.0`.

- [docs/releases/v78.0.0.md](docs/releases/v78.0.0.md): canonical `v78.0.0` Signal Card World, Vault Export, Battle Arena, Exchange, and PWA Continuity release archive.

- [docs/releases/v78.0.0-product-truth.md](docs/releases/v78.0.0-product-truth.md): `v78.0.0` product-truth freeze document.

- [docs/releases/v78.0.0-checklist.md](docs/releases/v78.0.0-checklist.md): release-prep checklist and additional gates for `v78.0.0`.

- [docs/releases/v78.0.0-process.md](docs/releases/v78.0.0-process.md): release-prep process for `v78.0.0`.

- [docs/releases/v77.0.0.md](docs/releases/v77.0.0.md): canonical `v77.0.0` Signal Circuit, Creator OS, Vault Settlement, and Runtime Trust release archive.

- [docs/releases/v77.0.0-product-truth.md](docs/releases/v77.0.0-product-truth.md): `v77.0.0` product-truth freeze document.

- [docs/releases/v77.0.0-checklist.md](docs/releases/v77.0.0-checklist.md): release-prep checklist and additional gates for `v77.0.0`.

- [docs/releases/v77.0.0-process.md](docs/releases/v77.0.0-process.md): release-prep process for `v77.0.0`.

- [docs/releases/v76.0.0.md](docs/releases/v76.0.0.md): canonical `v76.0.0` World Agent revenue, Public Proof, and Market Twin release archive.

- [docs/releases/v76.0.0-product-truth.md](docs/releases/v76.0.0-product-truth.md): `v76.0.0` product-truth freeze document.

- [docs/releases/v76.0.0-checklist.md](docs/releases/v76.0.0-checklist.md): release-prep checklist and additional gates for `v76.0.0`.

- [docs/releases/v76.0.0-process.md](docs/releases/v76.0.0-process.md): release-prep process for `v76.0.0`.

- [site/index.html](site/index.html): published verifier entrypoint.

- [apps/offline-verifier.html](apps/offline-verifier.html): mirrored app entrypoint.

- [apps/offline-record-seal.html](apps/offline-record-seal.html): offline record, seal, and verify studio surface.

- [apps/offline-settlement.html](apps/offline-settlement.html): offline settlement bundle builder.

- [docs/releases/v75.0.0.md](docs/releases/v75.0.0.md): canonical `v75.0.0` local proof, backup sign-in, market continuity, and Explore release note.

- [docs/releases/v75.0.0-product-truth.md](docs/releases/v75.0.0-product-truth.md): `v75.0.0` product-truth freeze document.

- [docs/releases/v75.0.0-checklist.md](docs/releases/v75.0.0-checklist.md): release-prep checklist and additional gates for `v75.0.0`.

- [docs/releases/v75.0.0-process.md](docs/releases/v75.0.0-process.md): release-prep process for `v75.0.0`.

- [docs/releases/v75.0.0-hpl-continuity-review.md](docs/releases/v75.0.0-hpl-continuity-review.md): HPL continuity review evidence for `v75.0.0`.

- [docs/releases/v75.0.0-receiz-identity-continuity-one-pager.md](docs/releases/v75.0.0-receiz-identity-continuity-one-pager.md): Receiz identity continuity one-pager evidence for `v75.0.0`.

- [docs/releases/v74.0.0.md](docs/releases/v74.0.0.md): canonical `v74.0.0` Receiz Key, identity artwork, and profile media release archive.

- [docs/releases/v74.0.0-product-truth.md](docs/releases/v74.0.0-product-truth.md): `v74.0.0` product-truth freeze document.

- [docs/releases/v74.0.0-checklist.md](docs/releases/v74.0.0-checklist.md): release-prep checklist and additional gates for `v74.0.0`.

- [docs/releases/v74.0.0-process.md](docs/releases/v74.0.0-process.md): release-prep process for `v74.0.0`.

- [docs/releases/v73.0.0.md](docs/releases/v73.0.0.md): canonical `v73.0.0` ownership, vault, and continuity release archive.

- [docs/releases/v73.0.0-product-truth.md](docs/releases/v73.0.0-product-truth.md): `v73.0.0` product-truth freeze document.

- [docs/releases/v73.0.0-checklist.md](docs/releases/v73.0.0-checklist.md): release-prep checklist and additional gates for `v73.0.0`.

- [docs/releases/v73.0.0-process.md](docs/releases/v73.0.0-process.md): release-prep process for `v73.0.0`.

- [docs/releases/v72.0.0.md](docs/releases/v72.0.0.md): canonical `v72.0.0` stable continuity release archive.

- [docs/releases/v72.0.0-product-truth.md](docs/releases/v72.0.0-product-truth.md): `v72.0.0` product-truth freeze document.

- [docs/releases/v72.0.0-checklist.md](docs/releases/v72.0.0-checklist.md): release-prep checklist and additional gates for `v72.0.0`.

- [docs/releases/v72.0.0-process.md](docs/releases/v72.0.0-process.md): release-prep process for `v72.0.0`.

- [docs/releases/v70.0.0-invariant-register.md](docs/releases/v70.0.0-invariant-register.md): public alpha invariant register carried forward by `v80.0.0`.

- [docs/literal-product-law.md](docs/literal-product-law.md): literal product law carried forward for `v80.0.0`.

- [docs/experience-first-engineering.md](docs/experience-first-engineering.md): experience-first rules for local proof and deterministic state.

- [docs/verified-history-first-principles.md](docs/verified-history-first-principles.md): append-only history and stronger-known-truth principles.

- [docs/offline-verified-register.md](docs/offline-verified-register.md): local register semantics for verified offline truth.

- [docs/pbi-recovery-receiz-id-binding.md](docs/pbi-recovery-receiz-id-binding.md): PBI/keyfile recovery and Receiz ID binding rules.

- [docs/value-loop-invariants.md](docs/value-loop-invariants.md): canonical Settlement, Reserve, certificate, note, and wire-transfer value-loop invariants.

- [docs/receiz-standard-v1.md](docs/receiz-standard-v1.md): public Receiz artifact and settlement standard framing.

- [docs/deterministic-surfaces.md](docs/deterministic-surfaces.md): deterministic route contract for public truth surfaces.

- [docs/conformance/README.md](docs/conformance/README.md): styled conformance hub with live badge surfaces, current imported snapshot results, and deep suite docs for the currently vendored conformance suites.

- [docs/presencebound-canonical-realm.md](docs/presencebound-canonical-realm.md): canonical PresenceBound/WebAuthn realm requirements.

- [docs/governance/README.md](docs/governance/README.md): public governance standards, registers, and evidence-summary map.

- [docs/FORMAT.md](docs/FORMAT.md): artifact and payload format contract.

- [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md): runtime and verification flow.

- [docs/HARDENING.md](docs/HARDENING.md): non-regression security rules.

- [CHANGELOG.md](CHANGELOG.md): release history.

- [RELEASE_NOTES.md](RELEASE_NOTES.md): full release notes.



## Security

If you discover a vulnerability (including false-positive verification), do not open a public issue.

Use [SECURITY.md](SECURITY.md).



## License

MIT for repository contents. See [LICENSE](LICENSE) for scope notes covering live `receiz.com` assets and Receiz branding references.