Live status · updated on every page load
Everything on this page reflects what’s live in production right now. The trust-contract block re-fires every time you load this page — if it ever stops returning the expected three verdicts, the trust system regressed and we want to know about it.
Running trust-contract self-test...
SCENARIO 1 of 3
Mint a clean PASETO from the demo issuer, verify it. Expect: allow.
SCENARIO 2 of 3
Mint, flip 4 chars of Ed25519 sig, verify. Expect: deny + bad_signature.
SCENARIO 3 of 3
Mint via ?revoked=1, verify. Expect: deny + revoked_key.
verify.agentpki.dev · Demo issuer: demo.agentpki.dev
Fetched from demo.agentpki.dev/.well-known/agentpki-issuer.json on page load. The verifier consults this same file to decide every allow / deny.
CURRENT KEYS (active)
REVOKED KEYS (in CRL)
Hand-maintained list. Every entry links to a live URL or a public repo — nothing here is a roadmap claim.
Click any to test. Every one returns real responses from real infrastructure.