oc · docs
docs / documentation

@orangecheck/agent-core


@orangecheck/agent-core / VerifyRevocationInput

Interface: VerifyRevocationInput

Defined in: agent-core/src/verify.ts:575

Extends

Properties

PropertyTypeDescriptionInherited fromDefined in
<a id="property-delegation"></a> delegationChainLinkThe envelope targeted by the revocation. Required to check signer is authorized. May be a v1.0 root delegation OR a v1.1 sub-delegation — both have identical principal, agent, id, and revocation.holders field shapes per SUB-DELEGATION.md §3.-agent-core/src/verify.ts:583
<a id="property-envelope"></a> envelopeRevocationEnvelope--agent-core/src/verify.ts:576
<a id="property-revocations"></a> revocations?RevocationEnvelope[]Revocations to evaluate against the delegation (or, for an action, every link in its chain). Fetch these from kind-30085 by #delegation.VerifyBase.revocationsagent-core/src/verify.ts:68
<a id="property-scopemode"></a> scopeMode?"strict" | "permissive"-VerifyBase.scopeModeagent-core/src/verify.ts:50
<a id="property-skiprevocationcheck"></a> skipRevocationCheck?booleanVerify WITHOUT consulting revocation feeds. Required to be explicit. SECURITY §7 item 7: "Query revocation feeds (Nostr kind-30085 by #delegation) for the cited delegation id before reporting OK, unless the caller explicitly opts out." The default was inverted — revocations were checked only when supplied, and omitting them skipped the check silently, so "checked, clean" was indistinguishable from "never checked". This library has no network by design, so the caller fetches the feed and passes revocations. Declining to is a decision they must state.VerifyBase.skipRevocationCheckagent-core/src/verify.ts:63
<a id="property-skipsignatureverification"></a> skipSignatureVerification?boolean-VerifyBase.skipSignatureVerificationagent-core/src/verify.ts:49
<a id="property-verifybip322"></a> verifyBip322?(msg: string, signatureB64: string, address: string) => Promise&lt;boolean>-VerifyBase.verifyBip322agent-core/src/verify.ts:48