Try now
Native Web Crypto checks one hosted fixture end to end: payload digest, independently pinned development key, Ed25519 signature, and referenced artifact digest. Operational qualification is not claimed.
Loading fixture…
Waiting.
A pass covers this fixture, this pinned development key, and these hosted bytes. It does not establish key custody, author identity, capture accuracy, deployment integrity, independent audit, or operational qualification.
Trust boundary
A pass means the receipt payload matches its recorded digest, its signature verifies under the key pinned in this page, and the referenced artifact bytes match the digest inside the signed payload.
This page, key, receipt, and artifact are served from one origin. To challenge a
hostile host, obtain the verifier code and trusted key through an independent
channel and check independently obtained bytes. The receipt’s own
cryptographic_proof field is not used to decide the verdict.