FateSeal proof verifier

Runs entirely in this page · nothing is uploaded

Verifies a proof bundle entirely in this page — no network, no provider access (a strict Content-Security-Policy forbids every outbound request). Every crypto step is computed twice, on two independent implementations (pure-JS reference and this browser's WebCrypto), and a verdict is shown only when they agree byte-for-byte. Output and exit semantics are byte-identical to the fate-verify CLI.

Input

Input kind

File Read locally — the file never leaves your machine.

…or paste JSON

Policy · advanced

--require-server-reveal Fail unless the server seed is actually revealed in the bundle. --require-receipts= Require at least N provider receipts to verify. --permissive-entropy Unsafe behind an accept gate — human review only. Caps the verdict at partial. --receipt-policy= How receipt signatures are treated when no provider key is at hand. --min-public-events= Require at least N public events in the transcript.

Relaxing any of these caps the verdict at partial. The report always prints the policy it ran with.

Content-Security-Policyform-action 'none'fate-verify

No verdict yet

Choose a proof bundle or paste one. The check runs here, in this page — the bundle never leaves your machine, and this page works with the network switched off.

Verifying — running both crypto oracles in this page…