Public check

Verify an attestation

Drop the sidecar you downloaded, or paste it. Optionally paste the content it claims to cover. Valid means: this public key signed these bytes. Not that the content is true. No signature → rejected on purpose.

Drop a .json fileAttestation JSONOptional content (to check the hash)

Issue a real file in the workspace, download it, and paste it here. Then hit tamper.