CWN Trust Gate · the Agent Firewall

Receipt Verifier

Paste a Trust Gate receipt (or open one from an email link). This checks it entirely in your browser — the signature is verified against the public key embedded in the receipt itself. No server. No database. No trusting us. That is what "verifiable from the certificate alone" means.
Tip: just click the “open this receipt in the verifier” link in your email — it fills this in and verifies automatically. Or paste your receipt below.
How this works: (1) it recomputes the SHA-256 of the decision evidence and checks it matches the receipt's evidence_hash — proving nothing was altered. (2) It verifies the Ed25519 signature against the receipt's own verify_pubkey_b64 — proving it was signed by the holder of that key. Both run via the browser's native Web Crypto. A log you have to trust is not proof. This is.

Production receipts also carry an ML-DSA-65 (NIST FIPS 204) post-quantum signature over the same hash.