background gif
eni6ma

Demos · Verify

Demo

Verify walkthrough

ENI6MA Verify is the customer-runnable suite: prove your deployment allows a good envelope and rejects fossils and tampers. Run it against your own Gate, the site does not publish residual-risk tables.

Replay is impossible by design.ShippingThe nonce is burned before validation in a durable ledger; it is spent even when validation later fails.Holds under the reference architecture

Falsifiable checklist

  • Health

    Pass criteria: Client, server, registry (and adversary if present) return HTTP 200 on /api/health.

  • Allow path

    Pass criteria: First poll with a fresh envelope returns headlines; transcript shows burn → validate → fetch.

  • Replay reject

    Pass criteria: Re-submitting the same envelope fails at stage=nonce. No second successful fetch for that nonce.

  • Binding rejects

    Pass criteria: Tampered body, retargeted endpoint, or loosened policy fail at the matching gate stage before serve.

  • Model B (optional)

    Pass criteria: With registry up, cloud validate path allows a fresh poll and logs registry validation.

Expected replay reject4 events
  • canon

    Canonicalized request body

    identical bytes to prior envelope

    0.00s
  • envelope

    Envelope received

    same nonce_uuid as previous ALLOW

    0.01s
  • burn

    Nonce already consumed

    stage=nonce · replay detected

    0.02s
  • verdict

    REJECT: fossil envelope

    capture ≠ authority for a second spend

    0.02s
Asset needed: Verify / adversary run summary with PASS markers.

Smoke commands

curl -sf http://localhost:8091/api/health
curl -sf http://localhost:8090/api/health
curl -sf http://localhost:8093/api/health
ENI6MA VerifySecurity architectureRequest Deployment Security Package