Verify

Drop a published baseline or a Baseline-Bundle. Verification runs entirely in your browser — no data leaves the page.

Pulled from /baselines? Paste the JSON, the .sig, and the publisher's public key — or load the published gtcx-v1 in one click.

Baseline JSON Signature (.sig, base64) Publisher public key (PEM) Expected SHA-256 hash (from manifest, optional)

Paste a Baseline-Bundle and the produced output. The page recomputes the outputHash and manifestHash and reports self-consistency.

Bundle JSON Produced output

Result

Verdict: