Public // offline verify

Browser verifier

Client-side Ed25519 verification for commit envelopes. Chain-of-custody against stored provenance requires a platform API key.

Platform API Sign up

Ed25519

commit envelopes

offline-verifiable proof

local-only

CLI & HOOKS

repo never uploaded

Scroll Gate

PR enforcement

signed vs unsigned

SSX360

control plane

identity · billing · audit

Offline · Ed25519

Envelope verifier

Local verification only

Validates Ed25519 over canonical manifest bytes in your browser. No repo upload. PQC overlays are reported but not cryptographically verified here yet — use matrixscroll verify with [pqc] for ML-DSA/SLH-DSA.

envelope card

schema: matrixscroll.commit_envelope.v1
device_id: MS-4319-20D5
actor: human/git-cli
signed_at: 2026-06-20T00:04:31Z
verdict: —

raw envelope

{
  "commit": {
    "author": {
      "date": "1740000000",
      "email": "dev@example.com",
      "name": "Example Developer"
    },
    "committer": {
      "date": "1740000000",
      "email": "dev@example.com",
      "name": "Example Developer"
    },
    "expected_id": "0000000000000000000000000000000000000000",
    "message": "feat: add commit envelope example\n\nSigned-by: matrixscroll",
    "parents": [],
    "tree": "0000000000000000000000000000000000000000"
  },
  "provenance": {
    "actor_type": "human",
    "tool": "git-cli",
    "tool_version": "2.43.0"
  },
  "repository": {
    "branch": "main",
    "name": "matrixscroll",
    "remote_url": "https://github.com/SSX360/matrixscroll"
  },
  "schema": "matrixscroll.commit_envelope.v1",
  "signature": {
    "algorithm": "ed25519",
    "device_id": "MS-4319-20D5",
    "mode": "emulated",
    "public_key": "bsVoWgUYK+NZNcSNIoWjO3IiTK/xT6U6mXFzBJgPUKc=",
    "schema": "matrixscroll.signature.v1",
    "signed_at": "2026-06-20T00:04:31Z",
    "value": "P/YGQsCEyFfWizauGvxFpJ71pk0JFvzgoMTRzEnLumtKIwac/H83eKNc5t4w9RJCudMZR6v24KCtsclB+uyTBQ=="
  }
}

Ready

Paste signed JSON or load the sample commit envelope to verify locally.

Chain-of-custody against stored provenance requires a platform API key. See Platform API or run hosted Scroll Gate in CI.