Products

Test it yourself

Every claim about the receipt format is a test anyone can run. The tests and the expected answers are published, the checkers do not import Vaara, and seven parties other than Vaara have run them in public.

Don't take our word for it.

Check one receipt

Paste a receipt into the explorer, or run the checker on your own machine.

Run every suite

One command runs every published test suite and prints a pass or fail per suite.

See who else ran them

The results table lists each outside run, who ran it and when.

Know what a pass does not prove

The results page says that too.

See everyone outside Vaara who has run the tests →

$ python prove_it.py
    run  ALLOW    risk=0.113  read a project file
    run  ALLOW    risk=0.111  search the support knowledge base
  BLOCK  ESCALATE risk=0.297  run a destructive shell command
  BLOCK  DENY     risk=0.255  fetch the cloud instance-metadata endpoint (classic SSRF)
verify_signed(evidence.zip)  ->  ok=True
verify_signed(evidence_tampered.zip)  ->  ok=False
  caught: trail.jsonl SHA-256 does not match manifest.trail_sha256 (trail was tampered after export)
A real run of examples/prove-it-yourself on a clean machine.
pip install vaara
vaara verify-record someone-elses-record.json
vaara conformance check --all

Receipt explorer · Conformance results