AIIR Public Value Demo — Release Evidence Variant

1. Verify the public artifact offline:

aiir --artifact aiir-demo-release.txt   --rekor-bundle rekor-bundle.json   --trust-root aiir-trust.json   --witnessed-checkpoint witnessed-checkpoint.txt   --require-witnesses release

Expected outcome:
- artifact hash matches the Rekor body
- inclusion proof matches the checkpoint root
- witness policy passes
- verification succeeds offline

2. Verify the tampered artifact:

aiir --artifact aiir-demo-release-tampered.txt   --rekor-bundle rekor-bundle.json   --trust-root aiir-trust.json   --witnessed-checkpoint witnessed-checkpoint.txt   --require-witnesses release

Expected outcome:
- verification fails because the artifact hash no longer matches the Rekor bundle