Evidence you can inspect

Verify a decision receipt.

Check whether this BoundProof service signed a payload and whether it has changed. Verification does not consume an execution permission.

Verify the claim, not just the badge.

A valid receipt authenticates the signed content. Read its environment, decision, action, issuer and expiry before relying on it.

Sandbox receipts never grant executable permission.
A valid signature can still belong to an expired decision.
Consumption and revocation must be checked online at execution time.
This verifier trusts the standalone BoundProof key, not arbitrary keys supplied inside a receipt.

Uploaded receipts are sent to this server for verification but are not saved by the verification endpoint. Do not upload unrelated personal data.