Check a signed record
on your own computer.

Pick a sample or drop in a record you hold, and your browser shows whether anything changed since it was signed. Nothing is uploaded.

What a check of the Clearfield sample shows

Three sample records from fictional organizations

Each is exported the same way as a customer’s record, with its report and every decision inside.

Client names, ID numbers and payment holds

Clearfield Accounting Group refuses its clients’ names and social insurance numbers, holds payment instructions for someone to approve, masks card and bank account numbers in its practice app, and warns on tax documents.

Download the record

Privileged material and an AI agent

Harbour Square Legal LLP refuses anything marked privileged, warns on confidentiality terms and stops its AI agent from sending data out.

Download the record

Health information and card numbers

Calder Street Law LLP refuses social insurance numbers, masks health card and payment card numbers in its practice app, and warns on medical terms.

Download the record

Try a changed copy

Change one decision in a sample and watch the check catch it.

Or change any file in a downloaded sample and drop it in the box below: the check names what changed.

Check a record you hold

Drop your record’s .zip file here. If it holds several .zip files, unzip it and drop them all here together.

What verified means

  • Nothing in the record changed after it was signed

    Every file must match the signed list of contents, so a changed file fails, and so does one added or removed. A decision erased at a person’s request keeps its place, so the check still passes.

  • Checked against an earlier export

    Drop an earlier export with a later one, and the check names any decision that changed or went missing between them.

  • Lists of names stay sealed

    A rule’s list of names, such as a client list, appears as a seal and a count. When a record includes the names, the check confirms they are the list that applied.

  • It was signed by a key you trust

    For the samples, the key below. For a record you hold, the fingerprint in your agreement, pasted into the box under Check a record you hold. Each export carries the public key that signed it, so records signed before a key change still check.

  • The sample signing key

    The samples are signed with a key used only for them. Its fingerprint, the code that identifies it: 9a914bf1310855175c7d868ad434987075412f627b2e8c18e5634e0bfcba045f

  • Public standards

    The checks use SHA-256 and Ed25519, and the script below is open source, so anyone can read each check and repeat it.

Check it with a script

The same checks run as one script file, with no packages, on Node.js 20 or newer.

node mandate-verify.mjs mandate-sample-record-accounting.zip --expect-fingerprint 9a914bf1310855175c7d868ad434987075412f627b2e8c18e5634e0bfcba045f