Offline verifier
Check a pack in your browser.
Drop a blackbox-pack/v1 file. Every signature, hash link, the signed seal and the no-secrets proof are checked here, in this tab, by @blackbox/verify. Nothing is uploaded and no request is made.
Or load a real agent run
Current default. Adds git config and credentials, .npmrc, .netrc, .pgpass, .pypirc, .p12/.pfx, Docker, Kubernetes and GnuPG files, and the .ssh, .aws and .gnupg folders to v1. A proof made under any other policy fails.
The pack carries its own key, so a PASS only shows it is internally consistent. Pin the key the proxy operator publishes (cli public-key) to trust who signed it.
No pack loaded yet
A pack holds a session's signed receipts, the proxy's public key, the seal and, when the prover passed, the proof. It never contains the private key or the agent's raw arguments.
From a terminal, the same checks run with npx ./blackbox-verify-0.1.0.tgz pack.json (the tarball is in the repo's release/ folder).