Update docs & tests to support proof.signature union, metadata.trace, and ERC-8211 schema wording

[GsCommand]

Motivation

• Bring commandlayer-org into alignment with CLAS trust schema changes that allow metadata.trace as optional correlation metadata and a proof.signature union shape supporting both single and multi-signature entries.
• Reflect canonicalization compatibility where json.sorted_keys.v1 remains the standard receipt path and erc8211.merkle.v1 is accepted at the schema/interop layer.
• Prevent brittle runtime tests and examples from assuming a single-signature-only shape and avoid implying full local ERC-8211 Merkle cryptographic verification where it is not implemented.

Description

• Tests: added helper functions isSingleProofSignature(), isMultiProofSignature(), and getPrimaryProofSignature() and updated tests/verifyReceipt-runtime.test.js to use them and to preserve legacy single-signature assertions.
• Tests: added a runtime test multi-signature proof shape does not crash runtime verifier that injects a role-based metadata.proof.signature[] and asserts the verifier does not crash (expected INVALID for the fixture).
• Docs: updated proof-related pages to document the union signature shape, optional metadata.trace, allowed signature roles, and ERC-8211 wording constrained to schema/interoperability (pages changed: public/canonical-receipts.html, public/sdk-records.html, public/api.html, public/verify-badge-demo.html, public/ambient-verification.html).
• Examples: preserved readable single-signature examples and explicitly labeled them as “single-signature proof”, and added short notes/examples that multi-signature arrays with role exist for solver/relayer/batch workflows.

Testing

• Ran npm install which completed successfully.
• Ran npm test which exercised the test suite and returned 36 tests run with 35 passing and 1 failing, where the failing test is an existing auth test (tests/api-auth.test.js) asserting 503 but receiving 400 and is unrelated to the proof/signature changes.
• Confirmed the modified runtime unit tests (including the new multi-signature test) passed as part of the test run.
• Attempted npm run build and npm run typecheck but both scripts are not present in package.json in this repository, so those steps were not executed.

---

Codex Task

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
commandlayer-commandlayer-org	Ready	Preview, Comment	May 22, 2026 6:17pm
commandlayer-org	Ready	Preview, Comment	May 22, 2026 6:17pm
commandlayer-org111	Ready	Preview, Comment	May 22, 2026 6:17pm