Check a receipt yourself - QED Proof

A receipt is only useful if you don’t have to trust QED Proof to believe it. The reference checker in the open-source POAW repository verifies a receipt entirely offline (plus one optional RPC call for the anchor), against nothing but the receipt itself and the issuer’s published keys.

What it checks

Parses the receipt and rejects an unsupported spec version.
Resolves issuer.key_id against the issuer’s published key set, checks the key’s validity window, and verifies the Ed25519 signature over the receipt body.
Recomputes the claim digest and confirms it matches.
If a proof is present, verifies the Merkle inclusion proof — and, if you pass an RPC URL, verifies the on-chain anchor too (see anchoring).
Reports the achieved trust level and the verdict.

Running it

From a checkout of the POAW repository:

# fetch the receipt and the issuer's public keys
curl https://api.qedproof.site/v1/receipts/<receipt_id>      > receipt.json
curl https://api.qedproof.site/.well-known/poaw-keys.json    > keys.json

# check it, including the on-chain anchor
uv run spec/tools/check.py receipt.json keys.json --rpc https://sepolia.base.org

Leave off --rpc to check everything except the anchor (signature, schema, and Merkle inclusion), which reports the anchor as "not_checked_offline" rather than skipping it silently. The tool prints a JSON report, for example:

{
  "checks": {
    "spec_version": true,
    "schema": true,
    "integers_only": true,
    "key": true,
    "signature": true,
    "claim_digest": true,
    "inclusion": true,
    "anchor": true
  },
  "valid": true,
  "achieved_trust_level": 2,
  "verdict": "verified"
}

valid is only true if every applicable check passes. achieved_trust_level is what the checker could actually confirm — 2 requires both a verified inclusion proof and a verified on-chain anchor; without --rpc, the ceiling is 1.

In the browser

Until then, use the command-line checker above, or point any RFC 6962-compatible Merkle verifier and an Ed25519 signature check at the receipt’s body, signature, and proof per the receipt spec.