Create a link (evidence that a layout step ran, with hashed materials and products) or an in-toto attestation statement (subject digests plus a predicate). Or paste a layout and its links to check them against each other offline, right here. Files are hashed locally with SHA-256 and never leave the browser.
Produces standard in-toto links (Specification v1.0) and in-toto attestation framework statements. Independent authoring tool, not part of the in-toto project. Verify mode checks a strict rule subset, see the notice in that tab.
🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Build a link
Build an attestation
Verify offline
Step identity
Materials (drag files here to hash)
Drop material files, or click to choose
Products (drag files here to hash)
Drop product files, or click to choose
Byproducts (optional)
Subject (drag files here to hash)
Drop subject files, or click to choose
Predicate
This verifier checks a strict subset of in-toto artifact rules client-side: MATCH (materials/products against a named prior step's products, same-name only), ALLOW, and DISALLOW. It does not implement CREATE/DELETE/MODIFY rule inference, inspections, or the full artifact-rule queue algorithm; unsupported rule kinds are reported, not silently passed. For a binding verification, use a reference implementation (in-toto-golang or in-toto python).
Layout (paste the intoto_layout JSON)
Links (paste a JSON array of link objects, one per step)