Skip to main content
Transparency

Public verification

Verify an audit packet

Paste the manifest SHA-256 from a packet you received. We'll tell you whether it matches a packet dispatched by the Accountant-General. Hashes don't reveal the packet's contents.

How verification works

  1. Every audit packet is sealed on dispatch with a SHA-256 of its manifest.
  2. The manifest is the canonical concatenation of each packet item: {kind}|{application_id}|{metadata}, sorted by id, joined with LF.
  3. Recompute SHA-256 over the manifest yourself; if it matches, the packet has not been altered.
  4. This page lets you check a hash against the public registry without seeing the underlying data.