Ratify Agent Relay Harness

and revoked while the work was still running. This repository replays that offline so you can

published claim fails to re-verify. No network call to either company.

What Ratify is. An open protocol for delegated authority that is bounded to a named

it. The receiving side checks who authorized what, for how long, and whether it still stands,

This is the Ratify-Protocol-side reproduction harness and adversarial annex. It orchestrates

does not reimplement them. The path-traversal and two-principal-isolation cases need two OS

single unprivileged uid, so they SKIP here and the annex reads six refusals rather than eight.

The one-command reproduction of the engagement ( npm run engagement ), offline, exits non-zero if any published claim fails to re-verify.

The published evidence trail for that offline run: the delegation chain, every ProofBundle , the VerificationReceipt chain, and a verifier-signed head checkpoint committed under evidence/ .

The adversarial annex ( adversarial/ ): runnable failing tests a skeptic can run.

Everything under evidence/ is a synthetic model of the engagement, built so that someone with neither deployment can run it. Its identifiers are fixtures: demo-cert-root , a demo channel id, fixed timestamps. Nothing in here is a certificate that was issued during the live sessions of 18 and 19 August 2026.