Manav signed the canonical JSON below with its server secret. Hash the JSON with HMAC-SHA256 using the MANAV_SERVER_SIGNING_SECRET and compare - if it matches, this proof is authentic.
Canonical proof JSON
{"actionPayloadHash":"3a021d1b4d265c8fb7220cc3200b10b93eab728195d3b4fcb4009b292d183ad6","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":"arivu13_f2d1e0","externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_vBPD0Yyv_3Af","signedAt":"2026-06-02 09:42:09"}
Action payload hash · SHA-256 of the canonical action payload
3a021d1b4d265c8fb7220cc3200b10b93eab728195d3b4fcb4009b292d183ad6
Server signature · HMAC-SHA256 over canonical JSON above
a41fe30e42feedf986c0b99e6fc1dce9d791fbedcabf73ada685a36eb224263f
Recompute it yourself
$ printf '%s' '{"actionPayloadHash":"3a021d1b4d265c8fb7220cc3200b10b93eab728195d3b4fcb4009b292d183ad6","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":"arivu13_f2d1e0","externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_vBPD0Yyv_3Af","signedAt":"2026-06-02 09:42:09"}' \
| openssl dgst -sha256 -hmac "$MANAV_SERVER_SIGNING_SECRET" -hex
$ # expected: a41fe30e42feedf986c0b99e6fc1dce9d791fbedcabf73ada685a36eb224263f