NullID public guide
Verify NullID packages honestly
Verify Package is the receiver-side inspection surface for NullID artifacts. It reports what can be checked locally and what remains declared-only or unproven.
Supported artifacts
The verifier handles workflow packages, safe-share bundles, policy packs, profile snapshots, vault snapshots, and NULLID:ENC:2 envelopes. It can use an envelope passphrase for encrypted packages and a shared verification passphrase for HMAC-protected formats.
What it can prove
NullID can check schema shape, embedded hashes, envelope decryption and integrity, and shared-passphrase HMAC metadata where the artifact supports it. It labels unsigned and package-declared fields plainly.
How to use it
- Paste an artifact or load a local file.
- Enter an envelope passphrase only for encrypted envelopes.
- Enter a verification passphrase only when the format includes shared-secret HMAC metadata.
- Review verified checks, warnings, trust basis, and manual-review items.
- Export a receiver checklist if needed.
Limitations
- Successful decryption is not the same as sender authentication.
- Unsigned workflow packages do not assert sender identity.
- HMAC verification only works for parties already sharing the passphrase.
- Unknown or malformed artifacts are rejected or labeled unsupported.