verify
Verify a record
Decode and check signed interaction records in your browser. Verification runs entirely client-side with the Web Crypto API: cofactorless Ed25519 signature check via the PEAC verification profile, I-JSON input validation, and JOSE header structure checks. No record leaves your browser.
The built-in sample verifies against an embedded demo key (offline). Pasted records resolve issuer metadata from their iss origin via /.well-known/peac-issuer.json (public https only).
how verification works
1 · decode
Parse the JWS, UTF-8 decode header + payload. Unsafe JOSE key headers rejected.
2 · resolve key
Fetch issuer config from iss, read jwks_uri (public https only).
3 · verify
Check the Ed25519 signature with Web Crypto. peac.dev does not act as the authority for third-party records.