eds-verify-audit-chain

name	eds-verify-audit-chain
description	Verify an edgesentry audit chain using the eds CLI. Use to confirm a chain is intact and a payload matches its AuditRecord.
license	Apache-2.0
compatibility	Requires eds binary (cargo build --release)
metadata	{"repo":"edgesentry-rs"}

Build

cargo build --release

Generate a keypair

./target/release/eds audit keygen > /tmp/keypair.json
KEY=$(python3 -c "import json; print(json.load(open('/tmp/keypair.json'))['private_key_hex'])")

Sign a payload

./target/release/eds audit sign-document \
  --payload <input.jsonl> \
  --key "$KEY" \
  --device-id <device-id> \
  --out /tmp/chain.json

Verify payload integrity

./target/release/eds audit verify-document \
  --payload <input.jsonl> \
  --chain /tmp/chain.json

Exits 0 if payload matches the AuditRecord.

Verify chain integrity

./target/release/eds audit verify-chain --chain /tmp/chain.json

Exits 0 and prints chain OK if no records have been tampered with.

Interpreting failures

Command	Non-zero exit means
verify-document	Payload was modified after signing
verify-chain	A record was altered or the sequence is broken