Bitcoin Stratigraphy · CISO Review

Article 12 receipt verifier

Checks the issuer's Ed25519 signature, the agent attribution bound into the Merkle leaf, and the RFC 6962 inclusion proof. Everything runs in this browser tab. Nothing is sent, stored or logged.

OfflineNo network · CSPNo storage

Evidence inputs

3 required · CRL optional

Paste the object exactly as received. Accepts article_12_receipt or proof wrappers.

Paste one or more PEM blocks (or a JSON array of PEM strings) from your independently pinned current and historical key list. Rotation selects the matching SHA-256 fingerprint; it never trusts a key from the receipt or snapshot. Retire compromised pins through your enterprise trust process.

The agent identity you expect, from your own records — not from the receipt.

Export /api/v1/compliance/revocation-snapshot before going offline. Signature, registry format, issuer pin and 15-minute freshness are checked against this browser's clock. A pass establishes absence from the issuer's registry at the signed as_of time, not after it.

Checks

Not run
  • Issuer Ed25519 signature & key fingerprintPending
  • Leaf binding & RFC 6962 inclusionPending
  • Bound to expected NIP-98 agentPending
  • Optional signed registry & snapshot-time non-revocationNot supplied

Verified output

Only shown on pass
Issuer key ID (SHA-256 of SPKI)
—
Agent pubkey
—
Merkle root
—
Escrow ID
—
Signed registry as of
—

What a pass does not prove

Read before relying