Manav signed the canonical JSON below with its server secret. Hash the JSON with HMAC-SHA256 using the MANAV_SERVER_SIGNING_SECRET and compare - if it matches, this proof is authentic.
Canonical proof JSON
{"actionPayloadHash":"cd8322ef859d2c1efca9082c1e7608696a6053831395446ae434abf3c83922bc","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":"arivu13_f2d1e0","externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_IurQly4PsmFS","signedAt":"2026-06-02 10:18:56"}
Action payload hash · SHA-256 of the canonical action payload
cd8322ef859d2c1efca9082c1e7608696a6053831395446ae434abf3c83922bc
Server signature · HMAC-SHA256 over canonical JSON above
0c2a586d023f6bba70f1cfbbe625bcd750e82b0b7d6f767037c071b9fbf153a6
Recompute it yourself
$ printf '%s' '{"actionPayloadHash":"cd8322ef859d2c1efca9082c1e7608696a6053831395446ae434abf3c83922bc","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":"arivu13_f2d1e0","externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_IurQly4PsmFS","signedAt":"2026-06-02 10:18:56"}' \
| openssl dgst -sha256 -hmac "$MANAV_SERVER_SIGNING_SECRET" -hex
$ # expected: 0c2a586d023f6bba70f1cfbbe625bcd750e82b0b7d6f767037c071b9fbf153a6