certified-variables

Verify IC canister query responses with Merkle-tree witnesses and subnet certificates.

Updated Dec 18, 2025
One-click install
npx skills add https://github.com/Looping-AI/looping-control-plane --skill certified-variables-looping-ai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: certified-variables
Source: https://github.com/Looping-AI/looping-control-plane/tree/main/.agents/skills/certified-variables
Command: npx skills add https://github.com/Looping-AI/looping-control-plane --skill certified-variables-looping-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Data integrity and authenticity for IC canister query responses are ensured via cryptographic certificates and Merkle-tree proofs, eliminating blind trust in replica returns.

Core Features & Use Cases

  • Merkle-tree backed data store with witness generation for per-key proofs
  • Certificate verification on the client or frontend, ensuring data authenticity
  • Use cases include verifiable reads, secure dashboards, and auditable data workflows

Quick Start

Call the certified-variables skill and query a key to obtain a value along with its certificate and witness for verification.

Frequently Asked Questions about certified-variables

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify IC canister query responses cryptographically?

IC canister query responses are verified cryptographically using Merkle trees and subnet certificates. This provides per-key witnesses and certificates in update and query flows, enabling verifiable data retrieval and client-side validation.

What is a certified variable in Internet Computer canisters?

A certified variable is per-key data backed by a Merkle-tree store, such as RbTree or CertTree. It generates witnesses and subnet certificates to prove data authenticity and eliminate blind trust in replica returns.

How do I generate a Merkle tree witness for canister data?

Merkle tree witnesses for canister data are generated using Merkle-tree backed stores like RbTree or CertTree. Querying a key obtains the value along with its certificate and witness for client-side verification.

Does data certification work with query calls and update calls?

Data certification works with both query and update flows by accessing the data_certificate in query calls. It applies per-key certified data with witnesses and certificates to enable verifiable reads across both call types.

Do I need certificate verification tooling for client-side canister data validation?

Client-side canister data validation requires integration with certificate verification tooling. This ensures data authenticity by validating the Merkle tree proofs and subnet certificates returned by the canister.