Install
Install in 7 s

Check a bundle offline

Check a bundle with one file you can read.

This page runs deedglass-verify.mjs, the repository’s independent verifier, in your browser. Drop an export bundle, records or a key set. Nothing is uploaded, and the page makes no request to another site.

Drop a bundle (.tar.gz), records (.jsonl or .json) or keys.json here

Add the issuer’s keys.json to check who sealed it. Without it, a bundle is checked against the keys it carries, which shows nothing changed since export, not who sealed it.

Drop a bundle to check it.

    The file this page runs

    Compare this SHA-256 with the file in the repository. If they match, this page runs exactly the code you can read there.

    SHA-256
    93e27404c15b67ba0cb4e1b0899e06ee1dba1e2b0aadf984d1424ce46261b67e
    Version
    deedglass-verify (JavaScript) 0.1.0 · 75,571 bytes · commit 8d4bc04

    deedglass-verify.mjs SHA256SUMS The file in the repository

    Check it yourself, then run it outside the browser:

    shasum -a 256 -c SHA256SUMS
    node deedglass-verify.mjs bundle.tar.gz --keys keys.json

    What it checks

    1. Every record

      It recomputes each record’s hash from its body and checks its seals, Ed25519 and, on v2 records, ML-DSA-65.

    2. The chain

      It follows each record back to the one before it, to the first record of the org, and reports any gap.

    3. The bundle

      It compares the bundle’s manifest with what it read, and checks the manifest’s own seal.