Manav signed the canonical JSON below with its server secret. Hash the JSON with HMAC-SHA256 using the MANAV_SERVER_SIGNING_SECRET and compare - if it matches, this proof is authentic.
Canonical proof JSON
{"actionPayloadHash":"8a85ed0917ce95f79bbc90ccca713e2ab0e712aafc0e66f26b7e966c6583ce0c","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":"arivu13_f2d1e0","externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_ZRlq4uQQlu9E","signedAt":"2026-06-02 08:28:47"}
Action payload hash · SHA-256 of the canonical action payload
8a85ed0917ce95f79bbc90ccca713e2ab0e712aafc0e66f26b7e966c6583ce0c
Server signature · HMAC-SHA256 over canonical JSON above
fb895dffdb9012f5957109da104b6f610d2bca9ead4ab9153ba2b6f9f978a18d
Recompute it yourself
$ printf '%s' '{"actionPayloadHash":"8a85ed0917ce95f79bbc90ccca713e2ab0e712aafc0e66f26b7e966c6583ce0c","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":"arivu13_f2d1e0","externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_ZRlq4uQQlu9E","signedAt":"2026-06-02 08:28:47"}' \
| openssl dgst -sha256 -hmac "$MANAV_SERVER_SIGNING_SECRET" -hex
$ # expected: fb895dffdb9012f5957109da104b6f610d2bca9ead4ab9153ba2b6f9f978a18d