How AI Artifact Verification Works

# Step 1: Hash the dataset
sha256sum your-dataset.csv
# Output: a3f9b2e1c4d7... your-dataset.csv

# Step 2: Fetch the certificate
curl https://certifieddata.io/api/certificate/cert_01j9k2m...
# Returns JSON with dataset_hash and signature fields

# Step 3: Verify the signature (Python example)
pip install cryptography
python3 << 'EOF'
from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PublicKey
from cryptography.hazmat.primitives.serialization import load_pem_public_key
import base64, json, urllib.request

cert_id = "cert_01j9k2m..."
cert = json.loads(urllib.request.urlopen(
  f"https://certifieddata.io/api/certificate/{cert_id}"
).read())

# Load the published public key
registry = json.loads(urllib.request.urlopen(
  "https://certifieddata.io/.well-known/certifieddata-registry.json"
).read())
pub_key_bytes = base64.urlsafe_b64decode(registry["public_key_raw_b64url"] + "==")
public_key = Ed25519PublicKey.from_public_bytes(pub_key_bytes)

# Verify signature against the certificate payload
payload = json.dumps({k: v for k, v in cert.items() if k != "signature"}, sort_keys=True)
signature = base64.urlsafe_b64decode(cert["signature"] + "==")
public_key.verify(signature, payload.encode("utf-8"))
print("✓ Signature valid")
EOF