An LFW Editorial Workflow export is a chain of signed events. This page recomputes every hash and checks every signature in your browser. Nothing you load here is sent anywhere.
What you need
The export file (JSON) from the portal's Record page, or the same file regenerated from your own site's copy. It carries both public keys. LFW's is also published at /.well-known/lfw-editorial-workflow-key.json, so you can compare.
What is checked
- Each event's payload hash equals SHA-256 of its canonical JSON (keys sorted, no spaces).
- Each event's hash equals SHA-256 of its sequence number, the previous event's hash, and its payload hash. Sequence numbers are consecutive.
- LFW's Ed25519 signature over each hash verifies with the LFW public key in the file.
- For events made on your site, the site's Ed25519 signature over its local row hash verifies with the site public key in the file.
- Each daily root equals the Merkle root of that day's hashes, and LFW's signature over the root verifies.
Ed25519 verification needs a current browser (Chrome 113, Safari 17, Firefox 130 or newer). Older browsers still check every hash and say which signatures they could not check.