Fixed receipt verification

See which check passed.

These committed records are public, synthetic, and unsigned. No private key is loaded. Structural and hash integrity can pass while signature verification is skipped. Neither check establishes that a decision was correct.

Fixture intact · integrity PASS · signature SKIP

Structure, hash, fields, chain: PASS
Signature: SKIP — no public key check
Scientific validity: NOT_EVALUATED
Action authority: NONE

Read package verifier report

- receipt[0]
    dsse:   PASS DSSE envelope well-formed (unsigned-honest, 0 signature(s))
    hash:   PASS DSSE PAE sha256 verified (33eaf6388f6204e5…)
    fields: PASS decision fields OK (decision=allow, honest_blocked=False)
    sig:    SKIP UNSIGNED-honest envelope — nothing to verify (not a pass)
- receipt[1]
    dsse:   PASS DSSE envelope well-formed (unsigned-honest, 0 signature(s))
    hash:   PASS DSSE PAE sha256 verified (37379e56ccf64a49…)
    fields: PASS decision fields OK (decision=deny, honest_blocked=True)
    sig:    SKIP UNSIGNED-honest envelope — nothing to verify (not a pass)
- chain:  PASS hash chain intact across 2 receipt(s)

The package verifier can return true while signature verification is SKIP. An unsigned hash is not issuer authentication.