Live register integrity check

This page re-computes the entire Origopass audit ledger from record #1, live, on every request: each record's SHA-256 content hash, the hash chain linking it to its predecessor, and the Ed25519 signature. It also cross-checks every stored passport version against its sealed ledger record.

Safe by construction: this check exposes only cryptographic digests, sequence numbers and the register's public key — no personal data, no restricted passport fields, no credentials, no internals. Transparency here adds zero attack surface.

Independent verification

Do not take this page's word for it:

• Download the signed checkpoint and store it outside this system. Any future state of the register must still contain your checkpoint's head record — otherwise history was rewritten.
• Fetch /api/verify.json from your own scripts/monitoring on a schedule.
• Recompute yourself: record_hash = SHA256("BPLEDGERv1|seq|ts|actor|action|entity|payload_hash|prev_hash"), where payload_hash = SHA256(payload) and prev_hash is the previous record's record_hash. Signatures are Ed25519 over the hex record_hash against the public key above.