NativeLink Agent Flight Recorder

Proof-grade demo; attestation core + independent verifier shipped

1. 01

   A signed, content-addressed attestation (nlfr.attestation.v1) that binds the agent half to the build half, carries no raw prompt (only a prompt hash), and re-emits byte-stable so the same run yields the same signature.

2. 02

   A standalone verifier (`nlfr verify`) that re-derives every digest and checks the Ed25519 / DSSE signature with no producer access, returns a pass / fail / boundary verdict plus a matching exit code, and fails closed on any tamper.

3. 03

   A six-case tamper matrix — flipped statement byte, flipped content-address, flipped signature, corrupted evidence pointer, wrong payload type, attacker-substituted key — where every tamper drives the verdict red while the untampered baseline passes.