EUPL-1.2 · GitHub · provena/verifier-core

You should not have to trust our verdict.

A verification result is a claim about evidence. If the code producing it is closed, you are trusting a vendor instead of reading a proof. verifier-core is public, buildable and runs without any Provena account.

View the repositoryRead SECURITY.md
provena / verifier-coreEUPL-1.2
git clone https://github.com/provena/verifier-core cd verifier-core cargo test --all-features Finished test [unoptimized] in 41.２s running term 318 tests test result: ok. 318 passed; 0 failed
318
TESTS
94%
COVERAGE
11
CONTRIBUTORS
0
OPEN CVES
01WHAT IS OPEN, WHAT IS NOT

Open core, stated plainly. The part that produces verdicts is public because you must be able to check it. The parts that hold keys and run a business are not, and we would rather write that down than imply otherwise.

✓PUBLIC · EUPL-1.2
  • verifier-coremanifest parsing, chain building
  • trust-anchorsC2PA + EU trusted list resolution
  • watermark-detectimage and audio decoders
  • provena-verifyoffline CLI
  • ledger-verifycheckpoint proof checker
  • conformance-suite1 400 fixture files
–SOURCE-AVAILABLE OR CLOSED
  • signing-servicesource-available under NDA
  • watermark-embedclosed · licensed model
  • panel + adminclosed
  • billingclosed
  • hosted infrastructureTerraform available to customers

Source escrow is available for Sovereign customers, with release triggers written into the contract.

02 · REPRODUCE OUR VERDICT

Same file, same trust lists, same answer.

Every verdict the hosted tool returns can be reproduced offline. Point the CLI at a trust list snapshot and it will agree with us — or tell you exactly where it does not.

  • ✓Trust list snapshots are published daily and signed
  • ✓Verdict codes are part of the public API contract
  • ✓Disagreements are treated as bugs, with a public issue
OFFLINE VERIFICATION
provena-verify \ --trust-list ./snapshots/2026-09-04.tsl \ --c2pa-roots ./snapshots/c2pa-2026-09-04.pem \ ministry_release_0904.jpg verdict SIGNED_QUALIFIED signer newsroom-nl-qualified anchor.c2pa reached anchor.eidas reached (qualified) watermark present (0.94) integrity unchanged
Report a verdict you disagree with

Attach the file or its hash and the verdict you expected. These get priority over feature requests.

Open an issue →
Add a container format

Parsers live behind a trait with a conformance suite. AVIF and Opus came from contributors.

CONTRIBUTING.md →
Translate the interface

Five languages ship today. Legal terminology matters more than fluency here.

Get in touch →