ORTHONODE
ASSURANCE
PLATFORM

// OAP public verifier interface — published
// Internal attestation engine: PROPRIETARY, not shown

interface IOAPVerifier {
    /// @notice Verify a hardware attestation proof on-chain
    /// @dev    Internal proof construction: CLASSIFIED
    function verifyAttestation(
        bytes32 deviceId,
        bytes32 proofRoot,   // 0xA3F7C1D9... deterministic
        bytes4  gateBitmap,  // 4-gate result bitmap
        uint256 nonce,
        bytes calldata sig
    ) external view returns (bool valid);

    /// @notice Get canonical proof root for enrolled device
    function getProofRoot(
        bytes32 deviceId
    ) external view returns (bytes32);

    // Gate logic:         ████████████████████ [REDACTED]
    // Hash construction:  ████████████████████ [REDACTED]
    // Proof compression:  ████████████████████ [REDACTED]
}

// SHA usage pattern (Arbitrum Stylus)
contract SHAIdentity {
    IOAPVerifier public immutable oap;

    function enroll(
        bytes32 deviceId,
        bytes32 proof,
        bytes4  gates,
        uint256 nonce,
        bytes calldata sig
    ) external {
        require(
            oap.verifyAttestation(deviceId, proof, gates, nonce, sig),
            "OAP: invalid attestation proof"
        );
        _enrollDevice(deviceId);
    }
}