[abrichr]

These are the landing demo's referral receipts. Four Seals were re-signed under the founder's signed run authorization. Each Seal, and the authorization itself, is anchored in the public Sigstore Rekor log and timestamped by the Sigstore TSA. The receipts sit next to #1409's redacted evidence in packages/flow/benchmark/scoreboard/raw/openemr_referral/certified/2026-10-20/.

What's in it

• run-authorization/ holds run-authorization.json, .sig, .allowed_signers, .anchor.json, .tsr and .tsa.json. The statement is openadapt.run-authorization/v1, sha256 bdfda160…04d3. It names bundle ec096afa…60b6, items r3–r6 with one run each, the standard profile, Seal key seal-ed25519-ca08dd7f42a4be01, and signer key SHA256:x+1MwCSAsNNHpc+UcIdbktY/Z+/FByyqfhuwiRzeO9A. The founder signed it with ssh-keygen -Y sign and the key published at github.com/abrichr.keys.
• Each N-rX-…/engine/ gets a new seal.json over the same redacted report.json bytes from scoreboard: OpenEMR referrals r3–r6 on the certified bundle, reports redacted and under an offline Seal #1409, plus seal.anchor.json, seal.tsr and seal.tsa.json.
• operator-profile.json covers the Seal key: 4 anchored runs, 3 verified and 1 stopped before effect, with the identity github:abrichr checked live against GitHub.
• README.md gets a table of log indexes and times, the verify command, and what the authorization does and doesn't show.

Record	Rekor log index
run authorization	3339630782
r3	3339635766
r4	3339636256
r5	3339636914
r6	3339637492

These are the first live submissions with the #1394 anchoring code. Public Rekor accepted the Ed25519ph hashedrekord entries.

Verification

Run on main's code, after the #1421 batch:

openadapt-flow local-seal verify 1-r3-…/engine 2-r4-…/engine 3-r5-…/engine 4-r6-…/engine \
  --keys seal-key.json --strict --require-anchor --require-timestamp --authorization run-authorization --live

All four pass. For each run, the output says the Seal is valid over report.json, and that its anchor checks out live and offline. It also prints this line: "authorized by github:abrichr (… identity checked against https://github.com/abrichr.keys now)". The timing is after_run: the runs ran at about 03:03 UTC and the authorization was logged at 15:53 UTC. So the card reads "Authorization signed by @abrichr on 2026-10-20, after this run". The re-seal doesn't change that.

Fixture test

tests/test_rekor_real_fixture.py adds 7 tests; offline, they verify:

• r3's real Rekor entry and the authorization's, against the Rekor key built into OpenAdapt;
• both real Sigstore TSA tokens, against the shipped TSA root;
• the authorization with a pinned key;
• refusal of a changed inclusion hash, integrated time or nonce.

The fixtures (32 KB of public records) are in tests/fixtures/rekor_real/.

Timestamp token files

Each RFC 3161 token is stored in its standard binary form, <name>.tsr (DER, as returned by the TSA). openssl ts -reply -in seal.tsr -token_in -text reads it. <name>.tsa.json names the file in tsr_file and its SHA-256 in tsr_sha256 instead of embedding base64. The verifier reads the .tsr and checks its SHA-256, then the token. A tsr_file that is anything but a bare .tsr name beside the JSON is refused, as are a missing or changed .tsr, each with a test. The real tokens were converted to this layout as-is, with no new TSA requests.

Hygiene

• The reports are scoreboard: OpenEMR referrals r3–r6 on the certified bundle, reports redacted and under an offline Seal #1409's redacted bytes, unchanged; no private/ files are committed.
• No private keys are committed. The Seal key's private half stays in the demo key home.
• .gitleaks.toml is unchanged. With the stock config, gitleaks git --log-opts=origin/main..HEAD (this PR's commits) and the staged scan are clean. The JSON field names avoid the word "token", which is what tripped generic-api-key. The prospect-name check is clean.
• The patient names in the folder names come from scoreboard: OpenEMR referrals r3–r6 on the certified bundle, reports redacted and under an offline Seal #1409's synthetic fixture.

🤖 Generated with Claude Code