AttestLayerAttestLayer

Sample Evidence Kit (real, verifiable)

Download a real sample kit, inspect the structure, and verify the Ed25519 signature — no account required.

Download Sample Kit (ZIP)

A minimal evidence kit with manifest, receipt, and four sample artifacts. Fully verifiable — real Ed25519 signature, real SHA-256 hashes.

SHA-256: 4eafc91b0a49c127c694346915c0df3fc2d8233f969b3ed5a2b45f9b9e51878f

Signing key source: registry.attestlayer.com/v1/jwks/issuer.jwks.json

Verify the Sample Kit

Upload the sample ZIP to the verifier and confirm hashes + signatures match.

Inspect Artifacts

View the manifest and receipt JSON files individually. All hashes and signatures are real.

What to Look For

  • manifest.json — SHA-256 hash of every file + file index. Compute the hash of each artifact and compare.
  • receipt.json — Ed25519-signed receipt with timestamp and manifest hash. The signature field is a real Ed25519 signature over the manifest hash digest.
  • artifacts/ — normalized evidence files (the actual content being attested)
  • mapping.json — original upload paths → normalized kit paths
  • Public key — included in the receipt (issuer.public_key_b64) and published at the registry JWKS endpoint

How to Verify (3 Steps)

  1. Compute SHA-256 of each file in evidence/ → compare against manifest.json hashes.
  2. Compute SHA-256 of manifest.json → compare against receipt.json → manifest_hash.digest.
  3. Verify receipt.json → signature using the Ed25519 public key in receipt.json → issuer.public_key_b64.