Public Audit Chain

1. Download the JSON via the button below and save the public key above to audit-public-key.pem.
2. For each record, strip signature, compact-stringify the rest, and Ed25519-verify against the key.
3. Cross-check previous_record_hash against the SHA-256 of the preceding record to confirm the chain.

const crypto = require('crypto');
const record = JSON.parse(fs.readFileSync('record.json'));
const { signature: sig, ...rest } = record;
const pubKey = crypto.createPublicKey(fs.readFileSync('audit-public-key.pem'));
const valid = crypto.verify(
  null,
  Buffer.from(JSON.stringify(rest)),
  pubKey,
  Buffer.from(sig.signature, 'base64')
);
console.log(valid ? 'VALID' : 'INVALID');