Manav signed the canonical JSON below with its server secret. Hash the JSON with HMAC-SHA256 using the MANAV_SERVER_SIGNING_SECRET and compare - if it matches, this proof is authentic.
Canonical proof JSON
{"actionPayloadHash":"017ea007a0dabac6b7e2fb89a8b7563337976aa043df2b9c0470b4b15fa8cb56","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":"arivu13_f2d1e0","externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_nSx2ZnrCafXg","signedAt":"2026-06-02 09:36:39"}
Action payload hash · SHA-256 of the canonical action payload
017ea007a0dabac6b7e2fb89a8b7563337976aa043df2b9c0470b4b15fa8cb56
Server signature · HMAC-SHA256 over canonical JSON above
1c8fc14ebf65e618149e8e052e757ee74a86316d527c7746392acd576943b777
Recompute it yourself
$ printf '%s' '{"actionPayloadHash":"017ea007a0dabac6b7e2fb89a8b7563337976aa043df2b9c0470b4b15fa8cb56","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":"arivu13_f2d1e0","externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_nSx2ZnrCafXg","signedAt":"2026-06-02 09:36:39"}' \
| openssl dgst -sha256 -hmac "$MANAV_SERVER_SIGNING_SECRET" -hex
$ # expected: 1c8fc14ebf65e618149e8e052e757ee74a86316d527c7746392acd576943b777