@meta
  v: 1
  route: /verify
  generated: 2026-06-15T11:33:56.933Z
  ttl: 1h

@intent
  purpose: How to verify an AAR with the zero-dependency reference tool, and what each conformance level checks.
  audience: ai-agent, developer, auditor
  capability: read, verify

@actions
  - id: get_tool
    method: GET
    href: https://github.com/frontier-infra/agentcontrolplane/blob/main/tools/aar.mjs
  - id: home
    method: GET
    href: /

@context
  > Verification needs no central server: remove the signature, canonicalize, resolve the signer's did:web public key, Ed25519-verify, then (optionally) re-run the committed check. A reference signer/verifier ships in the repo at tools/aar.mjs.

@nav
  self: /verify.agent
  parents: [/.agent]
  peers: [/.agent]