[TensorDevLJ]

Summary

Implements a standalone Go receipt verifier for RECEIPT_SPEC v1, addressing #119.

Changes

• Added a Go CLI and reusable verification package without dependencies on signetry-core.
• Implemented Ed25519 signature verification using a pinned public key, SHA-256 hash validation, canonicalization, and receipt invariant checks.
• Added tests covering all 8 conformance vectors, including key substitution and auto_merge: true rejection.
• Added documentation, usage instructions, and an entry in the independent implementations table.

Testing

cd independent-verifiers/go-receipt-verifier
go test ./...

Closes #119.

[github-actions]

All contributors have signed the CLA. ✅
_{Posted by the CLA Assistant Lite bot.}

[TensorDevLJ]

I have read the CLA Document and I hereby sign the CLA

[github-actions]

Signetry Reviewer — 🟡 Needs human review

A human should decide — the required check is pending.

Deterministic gates (the authority)

Gate	Status
Required status check	⏳ pending
Secret scan	✅ clean
CI permission / OIDC	✅ no forbidden change
Dependency skew	✅ ok
All green	❌

Findings

No issues found by the deterministic scanners.

Merge

A human should review and merge.

This review is advisory. It never merges on its own judgement — the deterministic gates + a human are the authority. Findings can have false negatives; a green bot verdict is not a guarantee.