PUBLIC-SURFACE LIMITED GO / CUSTOMER-PROCESSING NO-GO. Public information and synthetic examples may remain available; live files, checkout, production package generation, Registry-dependent issuance, and customer activation are paused.
Synthetic sample
Verify the current sample offline
Preserve the ZIP and obtain the sample-only issuer key set separately before disconnecting. The package cannot establish trust using a key from inside itself.
Demonstration trust domain only. This key validates only BRP-SAMPLE-2026-08-0001. It is not a production issuer key and does not imply certification, source truth, compliance, or buyer acceptance.
Download the independently identified inputs
- Sample ZIP — SHA-256
dedc773dec1dfa1f6f059506e096fcec0303d27561b7f1b6a262e9f3f0550711 - Canonical sample manifest — SHA-256
3211deabfdd5a6db82a3ef95cffc0f8ecd0919d6ddaac91d3f7f1615cd8faba7 - Separate sample-only issuer JWKS — SHA-256
1c699ff335c14a93138a7cad106a7bb62471b1dfff68573dba656901489cb770 - Signed receipt — key ID
attestlayer-brp-sample-2026-08-0001
Fail-closed verification sequence
Confirm the downloaded ZIP and separately downloaded JWKS match the SHA-256 values above.
Extract the ZIP into a new empty directory and reject absolute paths, parent traversal, duplicate members, missing members, and undeclared extra members.
Recalculate every manifest-listed file hash and the canonical manifest SHA-256.
Confirm the receipt binds BRP-SAMPLE-2026-08-0001, the manifest hash, and key ID
attestlayer-brp-sample-2026-08-0001.Validate the Ed25519 signature using only the separately downloaded sample JWKS. Any mismatch is a failure.