dsh-attestation-proof

Verifying release signatures in the DeepSeek Harness ecosystem typically requires transparency logs or a full Sigstore/SLSA chain, but many production environments demand a fully offline, deterministic path. dsh-attestation-proof targets this narrower gap: it does not discover trust roots, fetch logs, or infer publisher identity. Instead, it checks an explicit manifest against workspace-local in-toto signing statements field by field and emits a replayable, content-addressed JSON verdict.

Every step is a deterministic cryptographic check: the subject SHA-256 must match the signed in-toto subject; each public key is pinned by SHA-256 and restricted to Ed25519 or ECDSA P-256/SHA-256; a configurable minimum number of trusted signers must verify the DSSE PAE bytes; predicate types and JSON-pointer claims must satisfy the explicit policy. The report contains no signed payload, raw bytes, PEM, or key material. At the filesystem level, symlinks, path traversal, oversized inputs, and overwrites are all rejected.

Ideal for release teams that need auditable cryptographic evidence for build artifacts in air-gapped environments, or for platform engineers who want an independent offline signature-consistency check inside a CI/CD pipeline. It does not replace full SLSA supply-chain attestation; it provides a lightweight, reproducible layer of signature verification.