Metadata-Version: 2.4
Name: algovoi-tap-verifier
Version: 0.1.0
Summary: Offline verifier for AlgoVoi TAP receipts (Visa Trusted Agent Protocol post-authentication audit trail). Apache-2.0.
Author: AlgoVoi
License-Expression: Apache-2.0
License-File: LICENSE
License-File: NOTICE
Keywords: audit,ed25519,jcs,receipt,rfc8785,tap,trusted-agent-protocol,verifier
Requires-Python: >=3.9
Requires-Dist: cryptography>=42
Requires-Dist: rfc8785>=0.1.4
Provides-Extra: pqc
Requires-Dist: pqcrypto>=0.4.0; extra == 'pqc'
Description-Content-Type: text/markdown

# algovoi-tap-verifier

Verify an **AlgoVoi TAP receipt** offline, with no AlgoVoi software. For the Visa Trusted Agent
Protocol ecosystem ([trusted-agent-protocol#16](https://github.com/visa/trusted-agent-protocol/issues/16),
post-authentication receipt signing).

An AlgoVoi TAP receipt is a JCS-canonical (RFC 8785) preimage carrying the two-sided audit fact
(`authorization_ref` + `transaction_hash` + timestamp/sequence), a content-addressed `receipt_id`, an
**Ed25519** signature (TAP-native), and optionally a **Falcon-1024** post-quantum signature. This
package re-derives `receipt_id` and checks Ed25519 with only `cryptography` + `rfc8785`; install the
`pqc` extra to also check Falcon-1024.

```python
from algovoi_tap_verifier import verify_tap_receipt
r = verify_tap_receipt(receipt, ed25519_public_key=ed_pub_raw_32_bytes)
assert r.ok
```

```
algovoi-tap-verifier receipt.json --ed25519 <b64>            # CLI
```

Apache-2.0. Receipt *emission* (keystone → signed TAP receipt) is a separate commercial AlgoVoi product.
