The report this check will write
Three checks, each PASS or FAIL
Drop a passport file or paste a share link. The result carries these rows, in this order, and stops short of a verdict if any one fails.
- 1The sealEvery file of the sealed run matches its digest: the record is the one sealed when the run finished, under the plan committed before it started.It says nothing about who holds the link now, or about runs the vendor did not share.
- 2The signaturePlimsoll SI's Ed25519 signing key signed the seal. It is checked against the published key, never a key the passport names.A signature shows who sealed the run, not that the system is safe.
- 3The record digestNo byte of the record changed since it was sealed: outcomes, bounds and verdict.It does not hold replies a hosted run never kept: those are keyed digests only.
Replaying the verdict
To recompute the verdict yourself, ask the vendor for the sealed pack: it replays offline with the published key, without asking the system again.
