Manav signed the canonical JSON below with its server secret. Hash the JSON with HMAC-SHA256 using the MANAV_SERVER_SIGNING_SECRET and compare - if it matches, this proof is authentic.
Canonical proof JSON
{"actionPayloadHash":"a2f53ea1b584c23c346675502a2fa4d993a6638f54aae6b8d0c8bf24013c24a9","actionTitle":"Work session approved · tao.ai","actionType":"work_session","actorHandle":null,"externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_MQfN-dzgKO1j","signedAt":"2026-06-02 13:31:02"}
Action payload hash · SHA-256 of the canonical action payload
a2f53ea1b584c23c346675502a2fa4d993a6638f54aae6b8d0c8bf24013c24a9
Server signature · HMAC-SHA256 over canonical JSON above
e89fcd4e90e820bfd9e94cf38b62c7ed062e159a80231ccdab3ad94ee31df87d
Recompute it yourself
$ printf '%s' '{"actionPayloadHash":"a2f53ea1b584c23c346675502a2fa4d993a6638f54aae6b8d0c8bf24013c24a9","actionTitle":"Work session approved · tao.ai","actionType":"work_session","actorHandle":null,"externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_MQfN-dzgKO1j","signedAt":"2026-06-02 13:31:02"}' \
| openssl dgst -sha256 -hmac "$MANAV_SERVER_SIGNING_SECRET" -hex
$ # expected: e89fcd4e90e820bfd9e94cf38b62c7ed062e159a80231ccdab3ad94ee31df87d