402xAgent receipt verifier (offline)

This file works with no network: the public keys are pinned below and nothing is fetched. Paste a receipt JSON (from https://402xagent.com/v1/receipts/<id>?format=json) or open a saved .json file.

What is checked: the Ed25519 signature (RFC 8032) over the RFC 8785 (JCS) canonical JSON of the receipt with only signature removed (so kid is signed), against the pinned key with that kid. A valid signature proves 402xAgent issued the receipt unchanged; it does not change or endorse the verdict.

Results: VALID; INVALID (changed after signing); UNKNOWN KEY (a key this copy does not pin: get a newer copy); UNSIGNED (crawl record) (crawl receipts are not signed, so they are neither valid nor invalid).

Pinned public keys (the same as https://402xagent.com/.well-known/402xagent-keys.json):