[jeffrey-graham]

Summary

Implements Stellar-backed snippet content attestation, deterministic SHA-256 hash calculation, multi-revision attestation history, and independent on-chain integrity verification.

Key Changes

• lib/snippet-attestation-service.ts:
  • Computes deterministic sha256:<hex> content hashes with normalized line endings (\r\n -> \n) and rejects spoofed client-provided hashes.
  • Links immutable (Object.freeze) attestation records to Stellar transaction metadata (stellarTransactionHash, network, ledger, attestedBy).
  • Verifies current snippet content against attested hashes and authoritative Stellar transaction records across all 5 states (verified, modified, pending, failed, unverifiable) with contentIntegrity: "match" | "mismatch" | "unknown".
  • Supports multiple revision attestations per snippet and full history retrieval.
  • Rejects wrong-network transactions, handles concurrent/duplicate requests idempotently, enforces owner/collaborator authorization, supports network retry recovery, and logs audit events.
• API Endpoints:
  • POST /api/snippets/[id]/attest
  • GET /api/snippets/[id]/attestation
  • GET /api/snippets/[id]/verify
  • GET /api/attestations/[attestationId]
• Tests (lib/__tests__/snippet-attestation-service.test.ts):
  • Comprehensive unit and route tests covering SHA-256 hashing, unchanged vs modified snippet detection, wrong-network/invalid/missing transactions, historical revisions, concurrency, authorization, and audit logs.

Closes #218

[vercel]

@jeffrey-graham is attempting to deploy a commit to the Sudipta 's projects Team on Vercel.

A member of the Team first needs to authorize it.