SEVEN KG — signed demonstration bundle

All device, job, and timestamp values are synthetic. No hardware was attested. The demonstration key is separate from production and is not a production trust anchor.

Download demo-bundle.json, demo-public.pem and verify-demo.mjs into one folder. With Node.js installed, run:
node verify-demo.mjs demo-bundle.json demo-public.pem

The script verifies the envelope signature and embedded evidence digest. It does not validate hardware evidence, policy evaluation, job execution or results. A separately decoded payload is available as demo-payload.json; the signature covers the exact bytes inside payload_b64, not a reserialized payload.

For real records, obtain the expected issuer public key through an independently authenticated channel. Never trust the public key solely because the bundle includes it. No raw private device certificates are published in this example.