TrustFix · Proof Verifier

Verify a proof yourself.

Paste a TrustFix verifiable receipt. We check it is a genuine, untampered entry in the signed, append-only ledger — the tree-head signature, the Merkle inclusion, and the content hash. The check is a pure function of the receipt: no account, no TrustFix data, and any tampering fails. A paranoid auditor can run the identical verification in their own environment.

Where to get it: the organization publishes its ledger signing key(s) at its key directory — /.well-known/trustfix-keys/<org> — alongside a checksummed, version-controlled mirror. To stay genuinely out of band, confirm that key with the organization directly (or against its checksummed published copy) — not from this page. Fetching a key from any single endpoint, including that one, is still trusting whoever served it.

How it works: the receipt embeds the Ed25519-signed Merkle tree head and the inclusion path. Verification recomputes the entry hash from the entry fields (binding the content), checks the signature over the tree head, and checks the inclusion path to the signed root. Trust the log's public key out of band (pin it above); everything else is proven from the receipt alone. The ledger is tamper-evident and cryptographically signed; the timestamp above is recorded by the log itself on its own clock. It is not independently anchored to an outside time authority, so this check proves order and integrity — not a trusted wall-clock time.