Verify presentation proof with modified second credentialSubject.allow field - Negative

Summary:

When verifying VP with modified field (credentialSubject.allow) from "true" to "false", the verification do not break.

VP Body:

{
    "@context": [
      "https://www.w3.org/2018/credentials/v1",
      "https://w3id.org/security/suites/jws-2020/v1"
    ],
    "id": "did:web:gaiax.vereign.com:tsa:policy:policy:example:returnDID:1.0:evaluation",
    "proof": {
      "created": "2022-08-03T06:11:38.170830056Z",
      "jws": "eyJhbGciOiJKc29uV2ViU2lnbmF0dXJlMjAyMCIsImI2NCI6ZmFsc2UsImNyaXQiOlsiYjY0Il19..MEYCIQDJ7gTTZju3fJ-xaCBcWYziuI4J80S19AdxwNl3x4nzIQIhALApZj26dRANZZx5mp6PlChh1TExNc203LFPkHzfCWGk",
      "proofPurpose": "assertionMethod",
      "type": "JsonWebSignature2020",
      "verificationMethod": "did:web:gaiax.vereign.com:tsa:policy:policy:example:returnDID:1.0:evaluation#key1"
    },
    "type": "VerifiablePresentation",
    "verifiableCredential": [
      {
        "@context": [
          "https://www.w3.org/2018/credentials/v1",
          "https://w3id.org/security/suites/jws-2020/v1"
        ],
        "credentialSubject": {
          "age_over": 18,
          "allow": false,
          "citizenship": "France",
          "id": "https://gaiax.vereign.com/tsa/policy/example/ProofRequestResponse/1.0"
        },
        "issuanceDate": "2022-07-21T10:24:36.203848291Z",
        "issuer": "did:web:gaiax.vereign.com:tsa:policy:policy:example:returnDID:1.0:evaluation",
        "type": "VerifiableCredential"
      },
      {
        "@context": [
          "https://www.w3.org/2018/credentials/v1",
          "https://w3id.org/security/suites/jws-2020/v1"
        ],
        "credentialSubject": {
          "allow": true,
          "id": "https://gaiax.vereign.com/tsa/policy/example/ProofRequestResponse/1.0"
        },
        "issuanceDate": "2022-07-21T10:24:36.203861194Z",
        "issuer": "did:web:gaiax.vereign.com:tsa:policy:policy:example:returnDID:1.0:evaluation",
        "type": "VerifiableCredential"
      }
    ]
}

VP with added proof:

{
    "@context": [
        "https://www.w3.org/2018/credentials/v1",
        "https://w3id.org/security/suites/jws-2020/v1"
    ],
    "id": "did:web:gaiax.vereign.com:tsa:policy:policy:example:returnDID:1.0:evaluation",
    "proof": {
        "created": "2022-08-03T11:21:15.917597848Z",
        "jws": "eyJhbGciOiJKc29uV2ViU2lnbmF0dXJlMjAyMCIsImI2NCI6ZmFsc2UsImNyaXQiOlsiYjY0Il19..MEUCICecWOpxVONV5rikV4dWpO3_dHzhfHJlopl_v0BSAk8oAiEAlbvLNuMsVMaZRPyZWslV81647887fGeDnpjv5CcvUaQ",
        "proofPurpose": "assertionMethod",
        "type": "JsonWebSignature2020",
        "verificationMethod": "did:web:gaiax.vereign.com:tsa:policy:policy:example:returnDID:1.0:evaluation#key1"
    },
    "type": "VerifiablePresentation",
    "verifiableCredential": [
        {
            "@context": [
                "https://www.w3.org/2018/credentials/v1",
                "https://w3id.org/security/suites/jws-2020/v1"
            ],
            "credentialSubject": {
                "age_over": 18,
                "allow": true,
                "citizenship": "France",
                "id": "https://gaiax.vereign.com/tsa/policy/example/ProofRequestResponse/1.0"
            },
            "issuanceDate": "2022-07-21T10:24:36.203848291Z",
            "issuer": "did:web:gaiax.vereign.com:tsa:policy:policy:example:returnDID:1.0:evaluation",
            "type": "VerifiableCredential"
        },
        {
            "@context": [
                "https://www.w3.org/2018/credentials/v1",
                "https://w3id.org/security/suites/jws-2020/v1"
            ],
            "credentialSubject": {
                "allow": true,
                "id": "https://gaiax.vereign.com/tsa/policy/example/ProofRequestResponse/1.0"
            },
            "issuanceDate": "2022-07-21T10:24:36.203861194Z",
            "issuer": "did:web:gaiax.vereign.com:tsa:policy:policy:example:returnDID:1.0:evaluation",
            "type": "VerifiableCredential"
        }
    ]
}

Modified VP:

{
    "@context": [
        "https://www.w3.org/2018/credentials/v1",
        "https://w3id.org/security/suites/jws-2020/v1"
    ],
    "id": "did:web:gaiax.vereign.com:tsa:policy:policy:example:returnDID:1.0:evaluation",
    "proof": {
        "created": "2022-08-03T11:21:15.917597848Z",
        "jws": "eyJhbGciOiJKc29uV2ViU2lnbmF0dXJlMjAyMCIsImI2NCI6ZmFsc2UsImNyaXQiOlsiYjY0Il19..MEUCICecWOpxVONV5rikV4dWpO3_dHzhfHJlopl_v0BSAk8oAiEAlbvLNuMsVMaZRPyZWslV81647887fGeDnpjv5CcvUaQ",
        "proofPurpose": "assertionMethod",
        "type": "JsonWebSignature2020",
        "verificationMethod": "did:web:gaiax.vereign.com:tsa:policy:policy:example:returnDID:1.0:evaluation#key1"
    },
    "type": "VerifiablePresentation",
    "verifiableCredential": [
        {
            "@context": [
                "https://www.w3.org/2018/credentials/v1",
                "https://w3id.org/security/suites/jws-2020/v1"
            ],
            "credentialSubject": {
                "age_over": 18,
                "allow": true,
                "citizenship": "France",
                "id": "https://gaiax.vereign.com/tsa/policy/example/ProofRequestResponse/1.0"
            },
            "issuanceDate": "2022-07-21T10:24:36.203848291Z",
            "issuer": "did:web:gaiax.vereign.com:tsa:policy:policy:example:returnDID:1.0:evaluation",
            "type": "VerifiableCredential"
        },
        {
            "@context": [
                "https://www.w3.org/2018/credentials/v1",
                "https://w3id.org/security/suites/jws-2020/v1"
            ],
            "credentialSubject": {
                "allow": false,
                "id": "https://gaiax.vereign.com/tsa/policy/example/ProofRequestResponse/1.0"
            },
            "issuanceDate": "2022-07-21T10:24:36.203861194Z",
            "issuer": "did:web:gaiax.vereign.com:tsa:policy:policy:example:returnDID:1.0:evaluation",
            "type": "VerifiableCredential"
        }
    ]
}

Response:

HTTP/1.1 200 OK
date: Wed, 03 Aug 2022 11:21:16 GMT
content-type: application/json
content-length: 15
strict-transport-security: max-age=15724800; includeSubDomains
{
    "valid": true
}