External Audit

Independently verify sealed decisions. Look one up by ledger UUID, verify a .sspa/.sspb you already hold (fully offline), or browse the transparency log by period, signer key, or record hash. The PII-free attestation is downloadable directly; the full bundle is released by request after internal approval.

ledger uuid

Verify a bundle you hold

Upload a .sspa attestation or .sspb bundle (or a bare record.ssp.json). It is checked against this authority's trust key — the claim hash, the approver's WebAuthn signature, the trust countersignature, and (when the bundle carries them) the Rekor inclusion proof and RFC 3161 timestamp. Nothing is stored.

Prefer the command line? verify-ssp.py · trust-public.pem — see the verifier guide.

Browse the transparency log

The log is the index of completeness. Filter sealed decisions by period, by the instance signer's public key (its identity in a federated log), or by a specific record hash.

from

record hash (optional, sha256) signer public key (optional, PEM)

My bundle requests

The full .sspb carries domain context (potential PII), so it is released only after internal approval. Approved requests show a time-limited download link here.

Restricted area

Verify a bundle you hold

Browse the transparency log

My bundle requests

Request the full bundle (.sspb)

🔑 A signing key is required