Local receipt verifier
Paste a strict pai-receipt/v1 bundle—or a server response containing verification_bundle—to recompute its core hash, resolve the declared key, and verify the Ed25519 signature in this browser.
The local verifier checks strict receipt-v1 structure, canonical-core SHA-256, the declared key fingerprint, Ed25519 signature, UTC timestamp syntax, and an optional previous-hash link. It does not prove ledger membership, timestamp freshness or authority, deployment-private-key pairing, or semantic correctness.
awaiting receipt-v1 bundle
- • Rejects fields outside the strict pai-receipt/v1 contract.
- • Recomputes SHA-256 over canonical UTF-8 receipt-core JSON.
- • Derives and checks the complete declared-key SPKI fingerprint.
- • Verifies Ed25519 over the UTF-8 lowercase receipt_hash text.
- • Checks calendar-valid UTC timestamp syntax, not freshness or TSA proof.
- • Checks one expected prev_hash when supplied, not ledger membership.
Passing these checks establishes internal cryptographic consistency against this build's declared trust registry. It does not prove that the deployed private key is paired, that the receipt belongs to the live ledger, or that the recorded decision is semantically correct.