specimen receipts · signer vector set v1 · re-verified in your browser

Receipt feed

Every receipt below is a real dual-signed envelope. Your browser checks both signatures — Ed25519 and ML-DSA-44 — against the published public keys, with no account, no API key and no network. Nothing here says “pass” until your own machine has said it.

live feed

Not connected yet — it lights at genesis, when the first production keys are published. Until then this page shows specimens.

specimens · 5

Frozen at capture, so the same bytes reach every visitor and any two people can compare results. alg 1 is the only algorithm a schema-1 receipt may carry: ML-DSA-44 and Ed25519, both required, neither substitutable. Two different verdicts appear in each row and they are not the same claim: recorded is a signed field inside the receipt, the attestation verdict it carries about an enclave, and it is simply text until something checks the signature over it. verify is the one your browser computes, and it stays blank until it has.

  1. rcp_happy_pass

    iat
    2025-08-06 12:00:00Z
    alg
    1
    env
    live
    recorded
    pass
    doc sha-256
    a8ecace03e0e2465…
    verifyspecimen · not verified in this browser

  2. rcp_happy_fail_verdict

    iat
    2025-08-06 12:00:00Z
    alg
    1
    env
    live
    recorded
    fail · pcr0_not_allowed
    doc sha-256
    1c290c6fda7e0f4b…
    verifyspecimen · not verified in this browser

  3. rcp_happy_nonce_populated

    iat
    2025-08-06 12:00:00Z
    alg
    1
    env
    live
    recorded
    pass
    doc sha-256
    f42742ba3ee04ac6…
    verifyspecimen · not verified in this browser

  4. rcp_happy_env_test

    iat
    2025-08-06 12:00:00Z
    alg
    1
    env
    test
    recorded
    pass
    doc sha-256
    3074c0f949c857d2…
    verifyspecimen · not verified in this browser

  5. rcp_measurements_16_pcrs

    iat
    2025-08-06 12:00:00Z
    alg
    1
    env
    live
    recorded
    pass
    doc sha-256
    c4a4a0140577f692…
    verifyspecimen · not verified in this browser

provenance

Captured 2026-08-08 from pcrzero-signer/vectors/receipt-vectors-v1.json, the signer’s golden vector set, by scripts/build-specimens.mjs.

These are not production receipts. The signatures are real and they verify; the signing keys, the measurements and the document hashes are deterministic test material generated from seeds that are visible in the signer’s source. No production key signed anything on this page. A receipt for a failed measurement is signed exactly as strongly as one for a pass, which is why one of the specimens below records a fail and still verifies.

Only public keys are published here — 2 key sets, each a key id, an ML-DSA-44 public key and an Ed25519 public key. The verifier is the SDK’s own, vendored under src/scripts/receipt/ with its source path and re-vendor command in the header of each file.