Check a report’s evidence yourself

The verifier is one Python file with no dependencies (Python 3.8 or later). Download it and an evidence bundle, then run:

python3 openrepro_verify.py <attempt-id>.tar.gz --expect-head <the log seal on the paper page>

It checks every event's hash and the chain linking them, every artifact's SHA-256, and that the report names the log's final hash: log and artifact integrity, and the report's head reference. It does not check the report's contents against the log (re-deriving the report is the engine's repro verify, not yet public), and because the seal is published on this same site it is not an independent time anchor; compare it with a copy you kept. To check that a report file is the one released, compare its SHA-256 with release.json. Re-running the logged commands is how a result is reproduced again. Files: openrepro_verify.py · SPEC.md. The recipe is specified in SPEC.md so it can be reimplemented in any language.