Transparency log
The public transparency log
Every sealed bundle is committed as a leaf in an append-only, RFC 6962-style Merkle log, and every append produces a signed tree head. This page reads the log’s public state directly — no account, nothing to install — and, like /verify, it computes in your browser and stores nothing about your visit.
Current signed tree head
…
Key history
…
Recent entries
…
Consistency proof
The anti-rewrite check: a proof that the older tree is contained in the current one. This demo fetches it between the oldest head visible above and the live head — the same call the mirror recipe makes from cron.
Full root-to-root verification is what the mirror recipe and the e-ari-verify CLI perform; this page fetches and sanity-checks the proof the log serves.
Run your own mirror
Twenty lines of shell from the verifier’s README: run it from cron and a log that stops growing — or rewrites its history — trips your alarm, not ours.