Verify

Drop a published baseline, a Baseline-Bundle, or task evidence. Verification runs entirely in your browser — no data leaves the page.

Pulled from /baselines? Paste the JSON, the .sig, and the publisher's public key — or load the published gtcx-v1 in one click.

Baseline JSON Signature (.sig, base64) Publisher public key (PEM) Expected SHA-256 hash (from manifest, optional)

Paste a Baseline-Bundle and the produced output, or paste an API evidence response from /api/tasks/{id}/evidence. The page recomputes bundle hashes when present and reports artifact lifecycle state for external review.

Bundle JSON Produced output

Result

Verdict: