Check a signed record
on your own computer.
Pick a sample or drop in a record you hold, and your browser shows whether anything changed since it was signed. Nothing is uploaded.
What a check of the Clearfield sample shows
Three sample records from fictional organizations
Each is exported the same way as a customer’s record, with its report and every decision inside.
Client names, ID numbers and payment holds
Clearfield Accounting Group refuses its clients’ names and social insurance numbers, holds payment instructions for someone to approve, masks card and bank account numbers in its practice app, and warns on tax documents.
Privileged material and an AI agent
Harbour Square Legal LLP refuses anything marked privileged, warns on confidentiality terms and stops its AI agent from sending data out.
Health information and card numbers
Calder Street Law LLP refuses social insurance numbers, masks health card and payment card numbers in its practice app, and warns on medical terms.
Try a changed copy
Change one decision in a sample and watch the check catch it.
Or change any file in a downloaded sample and drop it in the box below: the check names what changed.
Check a record you hold
Drop your record’s .zip file here. If it holds several .zip files, unzip it and drop them all here together.
What verified means
-
Nothing in the record changed after it was signed
Every file must match the signed list of contents, so a changed file fails, and so does one added or removed. A decision erased at a person’s request keeps its place, so the check still passes.
-
Checked against an earlier export
Drop an earlier export with a later one, and the check names any decision that changed or went missing between them.
-
Lists of names stay sealed
A rule’s list of names, such as a client list, appears as a seal and a count. When a record includes the names, the check confirms they are the list that applied.
-
It was signed by a key you trust
For the samples, the key below. For a record you hold, the fingerprint in your agreement, pasted into the box under Check a record you hold. Each export carries the public key that signed it, so records signed before a key change still check.
-
The sample signing key
The samples are signed with a key used only for them. Its fingerprint, the code that identifies it:
9a914bf1310855175c7d868ad434987075412f627b2e8c18e5634e0bfcba045f -
Public standards
The checks use SHA-256 and Ed25519, and the script below is open source, so anyone can read each check and repeat it.
Check it with a script
The same checks run as one script file, with no packages, on Node.js 20 or newer.
node mandate-verify.mjs mandate-sample-record-accounting.zip --expect-fingerprint 9a914bf1310855175c7d868ad434987075412f627b2e8c18e5634e0bfcba045f-
Download
mandate-verify.mjs, version 2.6.0
-
SHA-256 of the file
b20b1956c414e0dc6af02483d496bb334bd64a2edf1e96b0497bdfef81933339 - Source and version history