Send a wallet and a condition. Get a signed boolean.

# pip install cryptography requests
import json, requests
from cryptography.hazmat.primitives.asymmetric import ec, utils
from cryptography.hazmat.primitives import hashes
import base64

# V1-ONLY WALKTHROUGH. This covers kid insumer-attest-v1 responses
# (pre-cutover keys) only. Keys minted today sign with kid
# insumer-attest-v2 over a domain-separated, canonical preimage:
# verify those with insumer-verify, or follow the verification
# algorithm in the OpenAPI spec. insumer-verify handles all three kids.
# insumer-verify 1.8.1+ also checks the pqSig/pqKid companion (ML-DSA-65).
data = res.json()["data"]  # res = your POST /v1/attest response
assert data["kid"] == "insumer-attest-v1"

# Fetch the public key from JWKS
jwks = requests.get("https://api.insumermodel.com/v1/jwks").json()
# Resolve the key by the kid on the response, never by position.
key = next(k for k in jwks["keys"] if k["kid"] == data["kid"])

# Reconstruct the signed bytes. v1 signs exactly these four fields,
# keys in their original order. Do NOT sort them.
att = data["attestation"]
signed = {"id": att["id"], "pass": att["pass"],
          "results": att["results"], "attestedAt": att["attestedAt"]}
payload = json.dumps(signed, separators=(",", ":"), ensure_ascii=False).encode()

# Decode the raw r||s signature and re-encode as DER for cryptography
sig_bytes = base64.b64decode(data["sig"])
der_sig = utils.encode_dss_signature(
    int.from_bytes(sig_bytes[:32], "big"),
    int.from_bytes(sig_bytes[32:], "big"))

# Build EC public key from JWK x/y coordinates
x = base64.urlsafe_b64decode(key["x"] + "==")
y = base64.urlsafe_b64decode(key["y"] + "==")
pub = ec.EllipticCurvePublicNumbers(x=int.from_bytes(x, "big"), y=int.from_bytes(y, "big"), curve=ec.SECP256R1()).public_key()
pub.verify(der_sig, payload, ec.ECDSA(hashes.SHA256()))  # raises on mismatch
print("Signature valid")