# Audit the candidate without a Finality account

This distribution is seller-controlled source and evidence. It supplies no real
hardware quote, outside auditor, witness operator, buyer result or certification.

Node 24+, Python 3.11+ and OpenSSL 3+ are required. Prepare pinned proof/reference
dependencies before running the audit (no private Finality API/account):

    python3 -m venv .venv
    .venv/bin/pip install -r research/audit/requirements.txt

Then run `make -f research/audit/Makefile audit DIGEST=PINNED_MANIFEST_SHA256`.
The manifest digest must be authenticated independently, not copied blindly from
the same untrusted archive. From the extracted kit run:

    make -f research/audit/Makefile verify-all DIGEST=OUT_OF_BAND_MANIFEST_SHA256

Pin the delivery manifest digest from an independently trusted source before
verifying its file hashes. The bundle's own key is not an independent trust anchor.
The high-assurance policy is always supplied by the relying party, outside the
certificate. Read ATTESTATION.md and KNOWN_LIMITATIONS.md before deploying.

Issue and verify are separate. The web gateway cannot generate an attested
certificate. It rejects high-assurance contracts or requests and also rejects any
request if FINALITY_REQUIRE_ATTESTED_ISSUANCE=true. Legacy shared-secret certificates
are explicitly UNATTESTED. This candidate does not replace the existing ordinary
protocol or label ordinary signing as hardware security.

Clean-room implementers receive the separate specification-only package, which
excludes this source distribution and expected truth files. Buyers retain the
reveal file and signing key on their own infrastructure. Witness operators retain
keys and checkpoint state without a Finality credential.