Package digest
Recalculates SHA-256 over the package contents and fails if they changed after packaging.
LOCAL EVIDENCE VERIFIER
Check a PermitGraph package without uploading it.
Use the reviewed package JSON created by the browser-local worksheet. The check runs entirely in this browser and reports whether the package is internally self-consistent.
- ✓ No upload
- ✓ Fail-closed checks
- ✓ Explicit trust limits
LOCAL CHECK
Select a reviewed package.
No upload. Your file stays in this browser.
Nothing leaves the browser.
The verifier checks the package digest, evidence linkage, review summary, decision status, and operator timing structure.
WHAT GETS CHECKED
One file, four consistency checks.
The verifier accepts only the current browser-local reviewed evidence package format. A failed check stops the result.
Evidence linkage
Confirms the boundary review receipt references the embedded scanner evidence ID and digest.
Review consistency
Recalculates the seven-field review summary and checks the package decision status.
Timing structure
Checks that the browser-local operator timing record is complete or explicitly not measured.
IMPORTANT LIMIT
A digest is not a signature.
Anyone who edits a file can calculate a new digest. A matching package digest shows internal consistency only. It does not establish source authenticity, provenance, inventory completeness, customer authorization, compliance, or runtime enforcement.
Confirm the source, authorized operator, and accepted boundary with the prospect outside this browser before treating the package as customer evidence.