osyra_ome.verify.witness

Private pre-release / network boundary: The currently usable customer surface is offline verification of an existing signed artifact against an out-of-band trust anchor. Memory/network RPC APIs and host snippets on this page describe protocol and interface shape; the public Edge bridge, package publication, and release acceptance remain pending. Do not treat api.osyra.ai:443 examples as a released customer route.

client.verify.witness — v0.2 stub.

Implementation deferred per design doc §3.3 phase table. v0.2 will:

• Decode the witness envelope
• Verify signature using dsTag "osyra-ome-cw-v1" (BEFORE root comparison — avoids the root-equality oracle side-channel per /osyra-security M2 v1.0.4 review)
• Validate gap proofs

Imports ONLY from ``osyra_ome.verify._kernel`` (BC-13 isolation guard).

Functions

verify_witness

def verify_witness(witness_bytes: bytes) -> bool

Verify a CompletenessWitness envelope (v0.2).