Skip to content

Financewolf - Reports

Verify a signed report

Check the report's issuer signature and the hashes of its bundled files. No account required.

Choose a Financewolf report ZIP

Clicking Verify sends the complete bundle, including any invoice XML or PDF, to Financewolf. It is processed transiently, is not retained and is not forwarded to another service. Choose the offline CLI below to keep the bundle on your computer.

Verify offline

The offline CLI is included in Financewolf's developer tooling; public binary distribution is pending release. With an authorised source checkout, build it below. Obtain the public key set through an independently trusted connection, and save it as report-keys.json.

go build -o financewolf-verify ./cmd/financewolf-verify
./financewolf-verify -bundle financewolf-report.zip -trusted-keys report-keys.json

For timestamped reports, also supply -tsa-ca trusted-tsa-ca.pem. The CLI uses local OpenSSL verification and makes no network calls. Exit code 0 means report integrity verified, 1 means verification failed, and 2 means a usage or input error. Keep public keys current so revoked keys are refused; never use a key supplied inside a report as its trust anchor.

Signed reports bind Financewolf observations to files and an exact ruleset. They do not transmit invoices, establish Peppol participant registration, certify legal or tax compliance, or guarantee recipient acceptance. Read the report format and trust model.