SZL Holdings · governed-receipt-spec

Governed Receipt Verifier

Paste a governance decision receipt and check it offline, in your browser. This runs the spec's dependency-free verify.py (Python standard library only) via Pyodide — no data leaves this page.
Honest scope. A receipt is a signed, tamper-evident audit record of what a governed runtime decided — the "receipt tier" of trust. It is NOT a zero-knowledge proof and NOT a proof of computation. The verifier re-checks: JSON-Schema validity, the recomputed content hash (sha256(DSSE PAE) == _pae_sha256), the prev-hash chain, and DSSE envelope structure. Full ECDSA-P256 signature checking is an upstream cosign verify-blob step.

Receipt input · JSON, JSON array, or NDJSON

Loading the offline verifier…
Examples:

Result

— awaiting input —
    The verifier boots on load (a few seconds). Then paste a receipt or click an example and press Verify.
    ⟨ 4TH WALL ⟩ You are reading rendered bytes. Don’t trust them — hash them:
    canonical source: SZLHOLDINGS/governed-receipt-verifier · verify from outside: curl -sL https://huggingface.co/spaces/SZLHOLDINGS/governed-receipt-verifier/resolve/main/index.html | sha256sum
    Integrity & origin of this page only — never the accuracy of anything on it. Known platform delta: Hugging Face may inject one window.huggingface variables <script> into <head> of the served page, so the in-browser hash can differ from the source hash by exactly that banner — diff the two documents to see it. Distrust only differences beyond that. Doctrine v11.