Vanish Labs

Verify a receipt

Paste a WorkSpec receipt payload. Its canonical sha256 is recomputed locally in your browser, then checked against the signed receipt ledger.

1 · Verified without trusting Vanish

The sha256 of your pasted payload is computed locally in your browser (canonical key-sorted JSON). The payload never leaves your machine: only its hash is sent.

2 · Verified via the API

Whether that hash is committed in Vanish’s signed receipt ledger, at which sequence position, and that the entry’s ed25519 signature validates under the published key. Keys are published at /api/receipts/keys; fingerprint = first 16 hex of sha256 of the trimmed PEM, so you can check the key independently.

3 · Not covered here

Full-chain integrity (no deleted or reordered entries) requires replaying the whole per-user chain. This page proves payload authenticity plus ledger membership of one receipt, not chain completeness.