Paste an EcoCloud Outcome Receipt, State-Balance Proof, or signed envelope and verify its signature right here in your browser — against the public keys, with no call to EcoCloud. The whole point is neutrality: a counterparty, an auditor, or a regulator can confirm a receipt is genuine and unaltered without trusting — or even contacting — us. Verification is pure ECDSA P-256; we sign the evidence, anyone verifies it.
ECDSA P-256 / SHA-256. The signature is raw IEEE P1363 (r||s, 64 bytes), base64url, over the UTF-8 bytes of canonical(payload) — recursively key-sorted JSON. The verifier picks the public key by kid from the JWKS and checks the signature with the Web Crypto API. Any change to any field breaks it. Air-gapped? Download the JWKS + the verifier and run it offline.