Seal check
Verify a report seal
Every Novera report is sealed with a SHA-256 digest computed over its content, written with object keys sorted, no whitespace and array order kept. Any edit to a figure, finding or date in the document changes the digest.
Check a digest
What it isA SHA-256 digest is a fingerprint of the report's sealed content. Change one figure or one word in it and the digest no longer matches.Why it mattersIt lets anyone check that a report was not edited after it was issued, without taking Novera's word for it. It records what was tested; it is not a certification.What to do nextPaste the digest into the seal check at /verify, or check a downloaded JSON export there. The Seal button on the run page shows the command that recomputes it yourself.Read more in the docs
Check a downloaded report
A digest says what Novera sealed. This says whether the file in your hands is that document: your browser hashes the report content exactly as the seal was computed, then compares it with the digest the file states and with Novera's ledger.
Drop the file here, or choose it. The JSON export (the JSON button on the report) or a bare report payload, up to 5 MB.
The file never leaves your browser; only its SHA-256 is sent to look it up, and the digest the file states, if that is a different one.
What the check tells you
- Whether Novera sealed a report with this digest, and whether the report it stores still hashes to it.
- When it was sealed, the suite and run date, who funded the grading, and the counts and grade exactly as the report states them; or, if the report was withdrawn, only that and when.
- Nothing else. The client, the agent, the findings and the evidence stay with whoever holds the report's link.
Checking the copy you hold
A digest match says Novera sealed a report with that digest. To show that the document in your hands is that report, check its JSON export above, or hash it yourself: with Node installed, this prints the digest, which should equal the one on the report. The seal covers the export's payload only; its link, stated digest and notice sit outside it.
node -e 'const c=v=>v===null||typeof v!=="object"?JSON.stringify(v):Array.isArray(v)?"["+v.map(c)+"]":"{"+Object.keys(v).sort().map(k=>JSON.stringify(k)+":"+c(v[k]))+"}";const p=JSON.parse(require("fs").readFileSync(0,"utf8")).payload;console.log(require("crypto").createHash("sha256").update(c(p)).digest("hex"))' < report.jsonTesting evidence, not certification: this report records Novera's testing of the declared agent, scenarios and configuration at the time shown. It is not a legal opinion, a conformity assessment, a certification or an assurance that any law is met, and Novera is not a notified body.