Auditwolf

Verify evidence

Recalculate every artifact hash, prove each page's Merkle membership, validate the trusted Ironfang signing key and check the RFC 3161 timestamp.

Offline verification

Verify without uploading

Auditwolf Verify is open source under Apache 2.0. It checks the complete evidence chain locally without contacting Auditwolf.

View source
auditwolf-verify -bundle evidence.zip 
-trusted-public-key ironfang-auditwolf-ed25519.pub
-tsa-ca tsa-chain.pem

OpenSSL is required for RFC 3161 timestamp verification. The signing key must be obtained independently from the evidence ZIP.