Canonical evidence hash
The evidence object is deterministically canonicalized and hashed with SHA-256.
FORENSIC INTEGRITY CHECK
Verify an Evidence Passport
Validate that a VeriTrust email-evidence package has not changed since it was signed. Verification checks the Ed25519 signature, evidence SHA-256, manifest SHA-256, and signing-key identity.
What this provesIntegrity and recorded provenance.What this does not proveLegal admissibility, sender identity, or that an email is safe.
Verification result
Waiting for evidence
The VeriTrust API verifies the embedded Ed25519 public key, its fingerprint, and whether that fingerprint is a recognized VeriTrust signing issuer. No private signing key is required for verification.
Manifest binding
The passport separately binds the recorded evidence manifest so pipeline and parser provenance cannot change unnoticed.
Ed25519 verification
The passport payload is verified against its embedded public JWK, derived fingerprint, and the VeriTrust trusted-issuer key set.