Primary Path: sample audit bundle
=================================

bundle.json           a signed export of two agent runs: a fraud-flagged
                      EUR 840 refund a reviewer rejected, and a production
                      rollback a reviewer approved
pubring.json          the public key ring to pin
bundle-tampered.json  the same bundle with one fact rewritten afterwards:
                      the rejected refund's amount changed to EUR 84

Verify them yourself (Python 3.10+):

  pip install primarypath-verify
  primarypath-verify bundle.json --pubring pubring.json
  primarypath-verify bundle-tampered.json --pubring pubring.json

The first prints OK. The second fails and names the exact record that
was changed. Nothing here contacts a server: the check is the hash chain
and the Ed25519 signature, recomputed on your machine.

verify-ok.txt and verify-tampered.txt are what the verifier printed when
these files were made (Primary Path 1.0.0-rc.2).