cert_atlas.reference

The reference verifier adapters — the baseline every submission is measured against.

def reference_verifier(path: str, case: dict) -> bool:

Accept iff the appropriate reference checker accepts.

What this atlas measures. Certificates are checked with require_anchor=False — that is, on the artifact alone, with no out-of-band fingerprint. That is deliberate: an anchor trivially detects any byte-level change, so scoring with one would measure the hash function rather than the checker. The interesting question is how much a verifier can catch from the artifact by itself.

The consequence is stated openly: a self-consistent forgery — physics inputs and recorded verdict edited together — is not detectable in this track, by anyone, and the atlas contains such a case (cert.self_consistent_forgery) to make that limit measurable rather than merely asserted. Use anchored_reference_verifier() for the track where it is caught.

def anchored_reference_verifier(path: str, case: dict) -> bool:

Reference checker with the out-of-band anchor supplied.

The case carries expected_fingerprint — the fingerprint of the genuine artifact, recorded before mutation. That stands in for a value a real user obtains from a signed report or a separate channel.

def accept_everything(path: str, case: dict) -> bool:

Negative control: the degenerate verifier that trusts everything.

def reject_everything(path: str, case: dict) -> bool:

Negative control: the degenerate verifier that trusts nothing.