Any signed evaluation receipt token — from a dashboard PDF, an audit-export bundle, or a webhook payload — can be pasted here. Plumbline AI will recompute the HMAC-SHA256 signature and compare it against the signed row on the Receipts ledger. A match proves the receipt was minted by Plumbline AI and has not been edited since; a mismatch proves the opposite.
The token is a base64url string copied from ?r=…— e.g. the audit-export footer, a webhook payload, or the dashboard “Copy verify URL” button.
Paste a base64url token and press Verify. The server will recompute HMAC-SHA256(RECEIPT_SIGNING_SECRET, canonical-json(receipt)) and compare to both the supplied signature and the matching Receipts ledger row.
A token from this page's URL is auto-submitted on first paint — just leave the field alone if you arrived from a dashboard or PDF link.