Receipt Bundle Verifier

One file, one command, two verdicts. Paste a RECEIPT-BUNDLE v0.1 bundle below and this page checks both halves of its trust story offline: the zk proof half (a Groth16 seal over the image id and the canonical journal bytes) and the logged half (a Sigsum inclusion proof with witness cosignatures, against a trust policy this page pins itself).

🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.

How to read the two verdicts

The proof half and the logged half are separate statements about separate subjects, so both are always printed and one is never summarised as the other: a receipt can be soundly proven while its subject was never logged, and a logged subject can carry a broken seal.

In a v0.1 bundle the logged half commits to a published registry checkpoint rather than to the individual receipt, and that scope is printed beside every logged verdict.

Bundle JSON

Nothing leaves this page. The trust policy keys are pinned in the page itself and are never read out of the bundle.

Verification logic is ported from chaingraph/kernels/_computeproof.mjs and chaingraph/kernels/c2sp-tlog-verify.mjs. The format is specified in RECEIPT-BUNDLE v0.1.