# Verify coexistence attestation

All four signatures cover the **exact bytes** of `COEXISTENCE-ATTESTATION.txt`.

```bash
cd ~/.stamp/keys/coexistence-proof

# Digest of the statement
shasum -a 256 -c COEXISTENCE-ATTESTATION.txt.sha256

# CMS / X.509
openssl cms -verify -binary -inform DER \
  -in signatures/cms/COEXISTENCE-ATTESTATION.txt.p7s \
  -content COEXISTENCE-ATTESTATION.txt \
  -certfile signatures/cms/cert.pem -noverify

# OpenPGP
gpg --import gpg-A27F71AB1E015272.asc   # once, if needed
gpg --verify signatures/gpg/COEXISTENCE-ATTESTATION.txt.asc \
  COEXISTENCE-ATTESTATION.txt

# ML-DSA-65
openssl pkeyutl -verify -rawin \
  -in COEXISTENCE-ATTESTATION.txt \
  -sigfile signatures/pq/mldsa65.sig \
  -pubin -inkey signatures/pq/mldsa65.pub

# SLH-DSA-SHA2-128s
openssl pkeyutl -verify -rawin \
  -in COEXISTENCE-ATTESTATION.txt \
  -sigfile signatures/pq/slhdsa.sig \
  -pubin -inkey signatures/pq/slhdsa.pub
```

If every check succeeds, the same controller attested all listed identities.