GeoVault — Attestation Verifier

Verify an attestation

Independent of the workstation: the checks below are recomputed from the JSON alone by the same Pure-Rust oxigdal-security code, compiled to WebAssembly. Runs entirely in this browser — nothing is sent anywhere. The verify_attestation example in oxigdal-security performs the identical check natively for skeptics.

Drag & drop an attestation.json, or choose a file

…or paste the JSON below.

Hash chain integrity

Recomputes every blake3 entry hash from the recorded operations, linked back to the session genesis. Proves: no recorded operation was altered, reordered, inserted, or removed after the fact. Does not prove: that the application logged everything it did — only that what was logged is intact.

Merkle root

Rebuilds the domain-separated Merkle tree over all entry hashes and compares it to the root bound into the seal. Proves: the signed commitment covers exactly this set of entries — the log is complete with respect to the seal. Does not prove: anything about events outside the log.

Ed25519 signature

Verifies the seal signature over the format version, session id, timestamps, entry count, Merkle root, head hash, traffic counters, and policy digest. Proves: the holder of the session's private key sealed exactly this record. Does not prove: who ran the session — the keypair is generated fresh in the browser and shown in the workstation UI.

Report

status: no attestation loaded

Recorded operations

#	time (informational)	operation	params	entry hash
—

Timestamps are informational only; ordering authority is the sequence number plus the hash chain.

This attestation is a tamper-evident record. It cryptographically proves: (1) the operation log is complete and unaltered since sealing, (2) it was sealed by the session key shown. It reports, on the honor of the application code you can inspect: 0 bytes sent to any external origin, under a browser-enforced Content-Security-Policy forbidding external connections. It cannot prove that other software on this machine sent nothing — no browser page can. Integrity of the record: proven. No-egress: enforced and observed, not mathematically proven.