haserjian/Assay Verify Pack

Verify AI evidence bundles (Proof Packs) for integrity and behavioral claims

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Activelast commit May 8, 2026
License: Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned

uses: haserjian/assay-verify-action@29ce6ccfa9399d6f1f5f0b0af42d90f4c47c7913 # v1.1.0

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
pack-path	Path to Proof Pack directory (glob supported)	no	proof_pack_*/
require-claim-pass	Fail the step if any claim check is not PASS	no	true
lock-file	Path to assay.lock for pinned verification semantics	no	""
comment-on-pr	Post a summary comment on the pull request	no	true
upload-artifact	Upload pack as a workflow artifact	no	true
require-pack	Fail if PR has file changes but no Proof Pack (set false for docs-only repos)	no	true
trust-target	Trust evaluation target (local_verify, ci_gate, publication). Advisory only — does not affect exit codes.	no	""
trust-policy-dir	Directory containing signers.yaml and acceptance.yaml for trust evaluation	no	""
enforce-trust	When true and trust-target is set, fail the step if acceptance is reject (requires clean policy load). Advisory by default.	no	false
assay-version	assay-ai version to install (default: latest)	no	""
python-version	Python version to use	no	3.11
verification-mode	Verification mode: proof_pack (default) or rce_replay	no	proof_pack
replay-output-dir	Subdirectory for replay results written inside each matched replay root	no	replay_results
jurisdiction-receipt-path	Optional path or glob for Guardian jurisdiction receipt JSON files to validate as an explicit CI check	no	""

Outputs

name	description
integrity	PASS or FAIL
claims	PASS, FAIL, or N/A
exit-code	0 (all pass), 1 (claim fail), 2 (integrity fail)
pack-count	Number of packs verified
pack-root-sha256	Comma-separated pack_root_sha256 values for verified packs
integrity-verdict	Aggregate integrity verdict: PASS or TAMPERED
claim-verdict	Aggregate claim verdict: PASS, HONEST_FAIL, or NOT_EVALUATED
replay-state	Machine-readable replay execution state
replay-verdict	Aggregate replay verdict: MATCH, DIVERGE, INTEGRITY_FAIL, or N/A
public-replay-verdict	Public verify_report replay verdict: MATCH, DIVERGE, or NOT_RUN
replay-roots-matched	Number of replay roots matched during discovery
replay-results-json	Machine-readable per-root replay results as compact JSON
trust-verdict	Aggregate trust verdict: PASS, UNTRUSTED, or NOT_EVALUATED
overall-verdict	Aggregate public verdict: PASS, HONEST_FAIL, TAMPERED, UNTRUSTED, or REPLAY_DIVERGED
verify-report-json	Compact JSON array of per-pack public verify report rows
summary	Markdown summary of verification results