Signet Audit Verify Action

Verify Signet audit chain integrity and signatures in CI. Fails the build if tampering is detected.

Usage

- uses: Prismer-AI/signet-action@v1
  with:
    verify-chain: true
    verify-signatures: true

Full Example

name: Audit Verification
on: [push]

jobs:
  verify:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-python@v5
        with:
          python-version: '3.11'

      - name: Run agent workflow
        run: |
          pip install signet-auth
          python your_agent_script.py

      - uses: Prismer-AI/signet-action@v1
        with:
          verify-chain: true
          verify-signatures: true
          since: '24h'

With Policy Validation

      - uses: Prismer-AI/signet-action@v1
        with:
          verify-chain: true
          verify-signatures: true
          policy: './policy.yaml'

Inputs

Input	Description	Default
signet-version	Signet CLI version to install	latest
signet-home	Path to Signet home directory	~/.signet
verify-chain	Verify hash chain integrity	true
verify-signatures	Verify all receipt signatures	true
since	Only check records since (e.g. 24h, 7d)	all
policy	Path to policy YAML to validate	—
fail-on-unsigned	Fail if unsigned tool calls exist	false

Outputs

Output	Description
chain-valid	Whether the hash chain is intact
chain-records	Total number of audit records
signatures-total	Total signatures checked
signatures-valid	Valid signatures
signatures-failed	Failed signatures

What It Checks

1. Chain integrity — Every audit record's hash links to the previous. Deletion, reordering, or modification breaks the chain.
2. Signature validity — Every receipt's Ed25519 signature is verified against the embedded public key.
3. Policy validation — If a policy file is provided, validates its syntax and rules.

Job Summary

The action writes a markdown summary to $GITHUB_STEP_SUMMARY:

Check	Result
Chain integrity	✅ Intact
Signatures	✅ All valid
Policy	✅ Valid

Links

• Signet — Cryptographic action receipts for AI agents
• Compliance Mapping — SOC 2, ISO 27001, EU AI Act, DORA, NIST