Attribute an Arweave bundled document to its own signer

A bundle uploader and the signer of an embedded DataItem can be different parties. Attribution requires verifying the inner signed message.

Verify both links to the item

Extract the item by its bundle entry. Recompute the item ID from its signature and compare it with the requested ID. Following ANS-104 for the declared signature type, verify that signature against the owner's key and the canonical deep-hash message including the tags and data. A digest match alone does not validate the signature.

outer bundle signed by uploader U
inner item signed by creator C
item ID = SHA-256(inner signature)

Publish precise attribution

Store U as the outer transaction signer and C as the verified item signer. A display name inside a tag is a claim from C. Binding that name to an organization or domain requires separate evidence, even when both cryptographic checks pass.

Sources