Verify a Witness log

npx @darkvectorcognition.ai/witness verify

verify walks every chain in the log. It exits with status 1 at the first broken link, so you can use it in a script or a CI job.

What a passing check proves

Every record links to the one before it, and no record in the file was changed after it was written.

What it does not prove

• Who acted. Principals are declared, not verified.
• That the log is the original. A log that was replaced and fully recomputed can still pass. To catch that, keep a trusted copy or the chain heads from anchor somewhere else.
• That nothing is missing. Calls through servers you did not wrap are never in the log.

Check our sample

The sample readout links three evidence files. Download sessions.jsonl and run verify on it to check the chain yourself.