Manav signed the canonical JSON below with its server secret. Hash the JSON with HMAC-SHA256 using the MANAV_SERVER_SIGNING_SECRET and compare - if it matches, this proof is authentic.
Canonical proof JSON
{"actionPayloadHash":"e0ca8405661a8ddaed3754e6c0950bec25bd9f533ebfeb67c3881958c7fe4022","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":null,"externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_ZZEOD1Fmzjh1","signedAt":"2026-06-02 10:22:01"}
Action payload hash · SHA-256 of the canonical action payload
e0ca8405661a8ddaed3754e6c0950bec25bd9f533ebfeb67c3881958c7fe4022
Server signature · HMAC-SHA256 over canonical JSON above
e6b96f7532c6735f01a8ce88b65a46fd1b2fcf9e83edd9d39e333eb70b3451b7
Recompute it yourself
$ printf '%s' '{"actionPayloadHash":"e0ca8405661a8ddaed3754e6c0950bec25bd9f533ebfeb67c3881958c7fe4022","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":null,"externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_ZZEOD1Fmzjh1","signedAt":"2026-06-02 10:22:01"}' \
| openssl dgst -sha256 -hmac "$MANAV_SERVER_SIGNING_SECRET" -hex
$ # expected: e6b96f7532c6735f01a8ce88b65a46fd1b2fcf9e83edd9d39e333eb70b3451b7