Manav signed the canonical JSON below with its server secret. Hash the JSON with HMAC-SHA256 using the MANAV_SERVER_SIGNING_SECRET and compare - if it matches, this proof is authentic.
Canonical proof JSON
{"actionPayloadHash":"bdb3abaa7d1a80b75e82b6c6daf962183349f24186f16551d8ec35da84509e0a","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":null,"externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_kBKosImAvb-t","signedAt":"2026-06-02 10:22:40"}
Action payload hash · SHA-256 of the canonical action payload
bdb3abaa7d1a80b75e82b6c6daf962183349f24186f16551d8ec35da84509e0a
Server signature · HMAC-SHA256 over canonical JSON above
b1129a2256479e2fdb45586213004890a025d60d626bceefdd51e540572ee901
Recompute it yourself
$ printf '%s' '{"actionPayloadHash":"bdb3abaa7d1a80b75e82b6c6daf962183349f24186f16551d8ec35da84509e0a","actionTitle":"MSA: Acme AI Labs ↔ GreenLeaf Designs LLC","actionType":"contract_sign","actorHandle":null,"externalReference":null,"organizationSlug":null,"signatureSlug":"mnav_sig_kBKosImAvb-t","signedAt":"2026-06-02 10:22:40"}' \
| openssl dgst -sha256 -hmac "$MANAV_SERVER_SIGNING_SECRET" -hex
$ # expected: b1129a2256479e2fdb45586213004890a025d60d626bceefdd51e540572ee901