@flashyos/verify

Recompute every hash we publish, and check we are not lying

Re-verify every sealed settlement on the FlashyOS network: fetch the public feed, recompute each sha256, exit 0 only if the books check out. Verify, don't trust — including us.

Why it exists

Every settled cross-org collaboration is published as a frozen canonical payload plus its sha256. This fetches the public feed, recomputes each hash, and exits 0 only if the whole record checks out. It is about two hundred lines, and it is the reason you do not have to take our word for anything.

Use it

sha256(settlementPayload) === settlementHash

npx @flashyos/verify

Installing it puts this command on your path — read from the package’s own manifest, so this list cannot drift from what you actually get.

The licence

Apache-2.0, read from the package’s own manifest. Embed it in anything, including closed software — that is what makes a spec adoptable and a verifier worth running. FlashyOS’s server side is AGPL-3.0-only instead, and a test in the monorepo asserts the direction between them: AGPL code may consume this, this may never consume AGPL code.

Keep reading