Built for
Trust

#!/usr/bin/env python3
import json
import hashlib
import zipfile
from pathlib import Path

def verify_evidence_bundle(zip_path):
    """Verify ProofKit evidence bundle integrity."""
    with zipfile.ZipFile(zip_path, 'r') as zf:
        # Extract and load manifest
        manifest_data = json.loads(
            zf.read('manifest.json').decode('utf-8')
        )
        
        # Verify each file hash
        for file_info in manifest_data['files']:
            file_data = zf.read(file_info['path'])
            calculated_hash = hashlib.sha256(file_data).hexdigest()
            
            if calculated_hash != file_info['sha256']:
                return False, f"Hash mismatch: {file_info['path']}"
        
        # Verify root hash
        root_hash = manifest_data['root_hash']
        file_hashes = [f['sha256'] for f in manifest_data['files']]
        calculated_root = hashlib.sha256(
            ''.join(sorted(file_hashes)).encode()
        ).hexdigest()
        
        if calculated_root != root_hash:
            return False, "Root hash verification failed"
        
        return True, "Evidence bundle verified successfully"

# Usage
result, message = verify_evidence_bundle('evidence.zip')
print(f"Verification: {message}")

This script runs completely offline and doesn't communicate with ProofKit servers, ensuring independent verification of evidence integrity.

1. Download Evidence Bundle

2. Run Verification

Quick QR Verification

1. Scan QR code on any ProofKit certificate
2. Instant verification via our secure verification portal
3. View certificate details including timestamps and hash verification
4. Download evidence bundle for complete audit trail

Instant Verification

Every certificate includes a QR code for immediate cryptographic verification