Skip to content

Verify a record

Decode and check signed interaction records in your browser. Decoding and Ed25519 verification run entirely client-side with the Web Crypto API. A real signed sandbox record is pre-loaded and verified against an embedded demo key — no network.

Paste your own record and the issuer key is resolved from iss via /.well-known/peac-issuer.json (public https only). The sandbox key is non-canonical demo material.

record.jws
1 · decode

Parse the JWS, UTF-8 decode header + payload. Unsafe JOSE key headers rejected.

2 · resolve key

Fetch issuer config from iss, read jwks_uri (public https only).

3 · verify

Check the Ed25519 signature with Web Crypto. peac.dev hosts no keys.