Check that a bundle is what it says it is.

If someone sent you an evidence bundle, you can verify its integrity here. No account, and nothing about you is recorded.

01 · What is checked

The contents against the hash they were sealed with.

INTEGRITY

The bundle is re-hashed and compared with the recorded value. A mismatch means the contents changed after they were sealed.

PROVENANCE

Which account produced it and when, so you know whether it came from the organisation you are dealing with.

SCOPE

What the bundle covers: the asset, the date, and which modules contributed to it.

02 · What a pass does not mean

Intact is not the same as compliant.

A successful check tells you the document is unaltered since it was produced, and who produced it. It says nothing about whether the findings inside it are acceptable, whether the scope was the right scope, or whether the organisation has since changed the system it describes. It is a seal, not a verdict.