Paste any signed /v1/attest response. Its ed25519 signature is checked offline, in your browser, against Predge's published public key. No trust required — the math is the proof.
The attestation envelope carries canonical (the exact JSON string that was signed, keys sorted, no whitespace), a signature (hex), and the signer's public_key (hex, raw 32-byte ed25519). This page imports the key with the WebCrypto API and checks the signature over the canonical bytes — entirely client-side, nothing is sent anywhere. It also confirms the key matches Predge's known key
13fa3d18…52d9 (also published at /.well-known/predge-attest.json). A valid signature from Predge's key means the settled outcome in payload is exactly what Predge attested — it cannot have been altered.