Manav signed the canonical JSON below with its server secret. Hash the JSON with HMAC-SHA256 using the MANAV_SERVER_SIGNING_SECRET and compare - if it matches, this proof is authentic.
Canonical proof JSON
{"actionPayloadHash":"6fc49a3e2070719920dcf34dea0b553510cccffb5c5ae03019e43eae56db3b10","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":null,"externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_K0MCOWX7l7dc","signedAt":"2026-06-02 10:23:43"}
Action payload hash · SHA-256 of the canonical action payload
6fc49a3e2070719920dcf34dea0b553510cccffb5c5ae03019e43eae56db3b10
Server signature · HMAC-SHA256 over canonical JSON above
51c03010292eedfe44bab67f2ca83593e79ddcece2019d975645e2926f8e1c22
Recompute it yourself
$ printf '%s' '{"actionPayloadHash":"6fc49a3e2070719920dcf34dea0b553510cccffb5c5ae03019e43eae56db3b10","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":null,"externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_K0MCOWX7l7dc","signedAt":"2026-06-02 10:23:43"}' \
| openssl dgst -sha256 -hmac "$MANAV_SERVER_SIGNING_SECRET" -hex
$ # expected: 51c03010292eedfe44bab67f2ca83593e79ddcece2019d975645e2926f8e1c22