Actenon Go Verifier SDK

Minimal protected-endpoint verifier SDK for Go, aligned to the Actenon Kernel's public action_intent and pccb contracts.

This package is intentionally narrow. It focuses on verifier-side proof checking at the protected execution edge and offline verification of Receipt counter-signatures. It does not issue counter-signatures or contain private-key custody or service code.

Install

go get github.com/Actenon/sdk-go@v1.0.0

Scope

• action_intent v1 and pccb v1 Go data structures
• protected-endpoint proof verification
• exact audience, tenant, subject, action, target, action-hash, not-before, and expiry checks
• optional verifier-side clock skew tolerance, defaulting to zero
• deterministic local-proof verification using the OSS local HS256 verifier
• custom signature verification via the exported SignatureVerifier interface
• offline Receipt counter-signature verification by historical or active kid
• offline, fail-closed issuer-status verification
• signed exact-action approval verification
• stdlib HTTP protected-endpoint example

Quickstart

package main

import (
    "fmt"
    "github.com/Actenon/sdk-go/verifier"
)

func main() {
    result, err := verifier.VerifyPCCB(actionIntent, pccb, opts)
    if err != nil {
        // typed refusal — see verifier.RefusalError
        fmt.Println("refused:", err)
        return
    }
    fmt.Println("verified:", result.Action, result.Target)
}

See examples/http-protected-endpoint/ for a complete stdlib HTTP server example.

The Actenon ecosystem

Repository	Role	Depends on	Packages
actenon-protocol	The neutral wire contract — what every artefact looks like on the wire	—	actenon-protocol (PyPI) · @actenon/protocol-types (npm)
actenon-kernel	The open verifier — defines what a valid proof is	actenon-protocol	actenon-kernel (PyPI)
actenon-permit	The developer on-ramp and authority broker	actenon-kernel, actenon-protocol	actenon-permit (PyPI) · @actenon/sdk (npm)
actenon-scan	The independent static-analysis scanner	—	actenon-scan (PyPI)
sdk-go ← you are here	Go verifier SDK	actenon-protocol	github.com/Actenon/sdk-go (v1.0.0)
sdk-rust	Rust verifier SDK	actenon-protocol	cargo add --git (crates.io pending)

Optional: actenon-cloud — a managed control plane (source-available; see its LICENSE). Not required by any component above; every capability in this ecosystem works without it.

Conformance

Every Actenon SDK runs against the same 51 conformance vectors in the Kernel. See CONFORMANCE.md for the canonical map.

License

Apache-2.0 — see LICENSE.