Confirm an AttachKit-signed PDF has not been altered since signing. Runs entirely in this page.
This page works offline, forever. Save it to disk and it keeps
verifying with no network and no AttachKit server — open your browser's
network tab to confirm nothing leaves your device.
This checks content integrity: that the exact bytes were signed by
the holder of the embedded passkey, and not changed since. The signer key
is pseudonymous — this is not an identity-verified or qualified
(eIDAS QES / AATL) signature, and it does not re-check the RFC-3161
timestamp (that needs a network call to the timestamp authority).