Verify
Check a Firmantia evidence pack.
Download the verifier. Open it from your computer. Drop the pack on it. No internet, no account, no contact with Firmantia or the organization that produced the pack.
In development. Early access open for regulated teams in the UAE and Qatar.
The seven checks
- The pack and every entry in it are in a format the verifier reads.
- Every record matches its hash, in an unbroken linked sequence.
- Every record is in exactly one chain entry, and every record an entry lists is in the pack.
- Every chain entry recomputes and links to the one before, with no gaps.
- Every entry is time-stamped by an authority the verifier trusts: each time-stamp token is cryptographically valid, and any public-log receipts verify.
- Every entry's signature verifies against a key in the registry sealed in that entry, inside that key's validity window.
- Every human approval is signed by the approver's own key, never the requester's, whenever the record names the requester.
The answer is VERIFIED, or FAILED with the exact reason and the exact record. The authorities the verifier trusts are built into it, never taken from the pack, so whoever produced the pack cannot choose what you trust; you can add your own.
The verifier
One HTML file, readable by anyone who receives a pack. Try it on a demo pack made from synthetic data: open the verifier, switch your network off if you like, and drop the pack on it. Change one character in a record and it fails.