WordSentinel™ Developer Guide

curl -s -H "Authorization: Bearer $TOKEN" \
  "https://universal-judgment-engine-985987917853.us-central1.run.app/profiles" | jq

curl -s -H "Authorization: Bearer $TOKEN" \
  -F "file=@doc.pdf" \
  "https://universal-judgment-engine-985987917853.us-central1.run.app/validate?profile=ops.ksa.hse.ptw@0.1" | jq

JOB_ID="..."
curl -s -H "Authorization: Bearer $TOKEN" \
  "https://universal-judgment-engine-985987917853.us-central1.run.app/jobs/$JOB_ID" | jq

EVIDENCE_URL="..."
curl -s "$EVIDENCE_URL" | jq '.header, .findings | length'

gcloud kms keys versions get-public-key \
  --location=us-central1 --keyring=ws-evidence --key=evidence-signing \
  --version=1 --output-file=pubkey.pem

import json, hashlib, base64
from cryptography.hazmat.primitives import serialization, hashes
from cryptography.hazmat.primitives.asymmetric import ec

def canonicalize(d): 
    return json.dumps(d, separators=(",",":"), sort_keys=True).encode()

def b64url_decode(s): 
    s += "=" * (-len(s) % 4)
    return base64.urlsafe_b64decode(s.encode())

pub_key = serialization.load_pem_public_key(open("pubkey.pem", "rb").read())
evidence_pack = json.load(open("evidence.json"))

signature = evidence_pack["signature"]["value"]
header = evidence_pack["header"]
digest = hashlib.sha256(canonicalize(header)).digest()

pub_key.verify(b64url_decode(signature), digest, ec.ECDSA(hashes.SHA256()))
print("Signature OK")