Local evidence verification
Check the exported evidence without uploading it.
Select a JSON manifest downloaded from the protected reviewer inbox. Validation and SHA-256 fingerprinting happen in this browser. The page makes no network request with the selected file and does not store its contents.
This checks the versioned schema, field allowlist, limits, event ordering, timestamps and exact claim boundaries. A valid file or matching fingerprint is not a digital signature, proof of origin, approval, customer delivery, payment, revenue or uptime.
No file selected. Nothing has been uploaded or verified.
Safe first run
Exercise the verifier without production evidence.
The fictional self-test is generated in this browser and never touches the production database. Its deliberately labelled workflow, dates, metrics, review and fingerprint are test data only. A successful self-test proves the verifier executed; it does not prove that a reviewer, pilot, delivery, payment or customer exists.
Local change comparison
Compare two valid exports without uploading either file.
Select an earlier baseline and a current manifest for the same workflow. The comparison validates both files, rejects a different workflow or an older “current” export, and reports only redacted state, aggregate-metric, review and audit-count changes. Progression integrity fails if earlier audit history is rewritten, recorded pilot timing changes, pilot evidence disappears or cumulative pilot counters decrease.
Select two files to compare locally.
What the check rejects
Unexpected fields fail closed.
The validator refuses unknown or missing fields, a different schema version, malformed pilot or review evidence, more than 50 events or 25 exceptions, non-increasing event sequences, event-time reversal, evidence dated later than the manifest update, broken state transitions, unsupported event types, roles or transition paths, contradictory pilot status, timestamps or completion metrics, missing pilot or clean-review evidence for advanced states, unsupported exception status, attempt count or resolution timing, exception status that contradicts the workflow state, a final event that disagrees with the manifest state and altered claim-boundary text. Files larger than 128 KiB are rejected before parsing.
What remains human
Verification is not acceptance.
The enrolled reviewer must still inspect the controlled evidence and make the independent QA decision. An authorized external sandbox and seven-day monitored pilot remain open gates for the €20k+ development target.