Verify an admission receipt

Verify the receipt. Don't trust the issuer.

Every /admit ACCEPT is a PASETO v4.public receipt, signed with the issuer's Ed25519 key — and that key is published at /.well-known/jwks.json. So you never take our word for it: this page re-derives the receipt's canon-v1 binding and checks its signature, live, in your own browser — the verification sends nothing to us. Edit the Proposal and the binding breaks: the signature stays real, but the receipt will not vouch for a byte you changed. That is the whole point.

The published trust root

You don't trust us — you verify it yourself, against a key we don't control the outcome of. What matters isn't our running service; it is two published facts you hold independently: the issuer's Ed25519 verifying key — pinned by its id, kid iss-prod-1 — and the content-hash of the spec each decision was made under (the receipt's policy_hash, addressed by its own bytes). Neither can be forked or faked out from under you. That pair is the standard, and it is live today.

Fetch it yourself https://barycenters-admit.fly.dev/.well-known/jwks.json

Checking the published key…

Verify a receipt

The receipt & the Proposal it bound

A real v4.public ACCEPT, minted by the live service. Edit any field and re-verify — the receipt binds one exact action.

domain

environment

service

image_digest

requested_by

What your browser checks

Not yet verified Press Verify receipt to decode the token, re-derive its canon-v1 binding, and check the Ed25519 signature against the published issuer key.

Why you don't have to trust us

The hash is the action's fingerprint

The receipt binds a canon-v1 hash of the exact Proposal it decided. Re-derive it from the Proposal and you get the same hash — change one byte and it moves. The orbit in the result is that hash, drawn.

proposal_hash = sha256( canon-v1(proposal) ) · recomputed here

The signature is public-key

PASETO v4.public signs with Ed25519. The verifying key is published at /.well-known/jwks.json — asymmetric, so anyone checks the signature without the issuer. That is the check the panel above runs, on your machine.

kid iss-prod-1 · verified with crypto.subtle

A receipt is a record, not a grant

Verifying proves what was decided and that it was genuinely signed — it never authorizes anything. authority_effect = 0, always. The boundary was a human's, set elsewhere.

adjudicates · never binds