~/receipt-check$curl -fsSLO https://www.excellent.so/verify-receipt.mjs
~/receipt-check$curl -fsSLO https://www.excellent.so/receipt-example.json
~/receipt-check$curl -fsSLO https://www.excellent.so/receipt-example-key.pub.pem
~/receipt-check$node verify-receipt.mjs receipt-example.json --pubkey receipt-example-key.pub.pem
Excellent receipt check — receipt-example.json
PASS pack shape
schemaVersion 1, envelope and trust root present
PASS signature algorithm is Ed25519
signature.algorithm = ed25519
PASS canonical binding present
the receipt is bound to a work snapshot, contract, evidence snapshot, evaluator, determination, enforcement decision, review and build
PASS payload matches its hash
recomputed sha256:ee27611cb8b1d02d3edca0ad12308a64409930de759f7fc64c9f39042387b5bc from the receipt content and it matches envelope.payloadHash
PASS envelope summary agrees with the receipt
publicVerification restates the receipt id, run, tenant, key and hash without contradicting them
PASS receipt and envelope carry the same signature
receipt.signature mirrors envelope.signature
PASS Ed25519 signature verifies
the signature over sha256:ee27611cb8b1d02d3edca0ad12308a64409930de759f7fc64c9f39042387b5bc checks out against the public key you supplied
PASS signing key is declared by the pack
trustRoot declares key_example_2026_09
PASS key fingerprint matches the one you pinned
sha256 over your PEM file is sha256:7e7b79a7135e246e76931580fd56a5d49fe94b2024c18dc81157038822bd1b4c, which is the fingerprint the pack declares for key_example_2026_09
PASS ledger anchor
the ledger and audit log match anchor sha256:ba2658d08481e61503a281a16ab83a37edcd54521475e33d5571fc6809258c0f, recorded to operator-held-file at 2026-09-23T17:05:00.000Z
RESULT: VERIFIED
$