Manav signed the canonical JSON below with its server secret. Hash the JSON with HMAC-SHA256 using the MANAV_SERVER_SIGNING_SECRET and compare - if it matches, this proof is authentic.
Canonical proof JSON
{"actionPayloadHash":"b104a5cfa560e40d42d916c94049764e54b30e681f495685bfbebca6dff362fb","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":"arivu13_f2d1e0","externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_BDImG7eQRJRC","signedAt":"2026-06-02 09:38:11"}
Action payload hash · SHA-256 of the canonical action payload
b104a5cfa560e40d42d916c94049764e54b30e681f495685bfbebca6dff362fb
Server signature · HMAC-SHA256 over canonical JSON above
12b39d6d051aab7bf2c1130b8de1324552c12b6be259012fb74833a0c5c631f2
Recompute it yourself
$ printf '%s' '{"actionPayloadHash":"b104a5cfa560e40d42d916c94049764e54b30e681f495685bfbebca6dff362fb","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":"arivu13_f2d1e0","externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_BDImG7eQRJRC","signedAt":"2026-06-02 09:38:11"}' \
| openssl dgst -sha256 -hmac "$MANAV_SERVER_SIGNING_SECRET" -hex
$ # expected: 12b39d6d051aab7bf2c1130b8de1324552c12b6be259012fb74833a0c5c631f2