Manav signed the canonical JSON below with its server secret. Hash the JSON with HMAC-SHA256 using the MANAV_SERVER_SIGNING_SECRET and compare - if it matches, this proof is authentic.
Canonical proof JSON
{"actionPayloadHash":"070eacf3aef9f3db359bb3de14036e7c83e3348515b4fc4bd118214769f850b0","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":"arivu13_f2d1e0","externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_tb--ERBb3xZ2","signedAt":"2026-06-02 09:37:42"}
Action payload hash · SHA-256 of the canonical action payload
070eacf3aef9f3db359bb3de14036e7c83e3348515b4fc4bd118214769f850b0
Server signature · HMAC-SHA256 over canonical JSON above
54605157528c8a9151d4e0a48dcbc71a19e33650a8a1c6db4e6bf32c4a8dfb89
Recompute it yourself
$ printf '%s' '{"actionPayloadHash":"070eacf3aef9f3db359bb3de14036e7c83e3348515b4fc4bd118214769f850b0","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":"arivu13_f2d1e0","externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_tb--ERBb3xZ2","signedAt":"2026-06-02 09:37:42"}' \
| openssl dgst -sha256 -hmac "$MANAV_SERVER_SIGNING_SECRET" -hex
$ # expected: 54605157528c8a9151d4e0a48dcbc71a19e33650a8a1c6db4e6bf32c4a8dfb89