Reference passes / Signet matches. Gap 0.
Certification receipt · recorded 2026-07-22
What the receipt actually proves.
Two distinct runs support the claim: a differential sweep of the public compatibility profile, and an end-to-end acceptance run through better-auth’s unmodified client. They answer different questions, and the receipt keeps them separate.
Real client-driven flows, passed in full.
Where the reference passes and Signet does not.
Scope. The compatibility profile is a public, replayable set of checks; the same checks run against the better-auth reference implementation and against Signet, and the gap is the count of checks the reference passes and Signet does not. Gap 0 means that on every check in the profile, a client cannot tell the two apart. It is not a claim that every better-auth route is implemented: the profile is scoped to what those checks exercise, and anything they do not exercise sits outside it. Ask about a specific route and we will tell you plainly whether it is in the profile.
How to read 280/280.
Every check in the public compatibility profile runs twice, once against the better-auth reference implementation and once against Signet, and the results are compared. The profile counts only checks the reference implementation itself passes; Signet is not graded on checks the reference fails. The gap (a check the reference passes and Signet does not) is 0.
What 14 / 14 means.
On top of the differential sweep, better-auth’s unmodified client drives real sign-up, session, organization, and two-factor flows against Signet. These are the checks, in the order they run.
01signUp.email returns the userPASS
02getSession sees the signed-up userPASS
03updateUser succeedsPASS
04user update is visible on the sessionPASS
05listSessions returns the active sessionPASS
06organization.create returns the orgPASS
07organization.list contains itPASS
08getFullOrganization shows creator as ownerPASS
09twoFactor.enable returns TOTP + backup codesPASS
10changePassword succeedsPASS
11getSession is null after signOutPASS
12signIn.email accepts the rotated passwordPASS
13wrong password returns INVALID_EMAIL_OR_PASSWORDPASS
14session is live again after signInPASS
End-to-end 14/14Conformance 280/280Gap 0Recorded 2026-07-22
Receipt posture. These are recorded pointers to repeatable compatibility runs, not implied cryptographic attestations. A deployed Signet instance renders its own receipt at
/certification from the same source as its machine-readable receipt.