Check a receipt

What this proves, and what it does not

• It runs here, not on our servers. The receipt never leaves the tab. You can disconnect from the network and the check still works.
• It proves the receipt is intact and signed. The body is re-hashed and compared with the digest, so an altered body fails even if someone recomputed the digest field. The signature is then checked against the address.
• A page we serve is convenience, not independence. We gave you this checker and the address it checks against. To make it independent, take the address from /limits yourself and check the signature with any Ethereum library: it is EIP-191 over the digest string.
• The standalone tool is still unpublished. npx @untold/verify does not resolve yet. We would rather say that here than let this page imply a tool exists to install.
• A receipt says what was served, not that it was right. It names the model and the enclave. It does not claim the answer was correct, useful or safe, and it reveals nothing about what was asked — the commitments cannot be opened without salts we never store.