The site, signed.
Manifests are served from /attest/site/latest.json
and numbered /attest/site/<n>.json. Press
prove on any entry: your browser
recomputes the file-list digest, checks the pinned deploy key, verifies
the Ed25519 signature, and confirms the pulse anchor sits inside the
confirmed chain. Nothing is taken on faith from this page.
The ledger is fetched and verified in your browser — nothing here is pre-rendered as true.
The raw endpoint is /attest/site/latest.json.
Between any two deploys.
Pick two manifests and the diff is computed from their signed file lists: keys that appeared, keys that vanished, keys whose bytes changed. Both manifests are re-verified before the diff renders — a diff between unverified claims would just be two rumors compared.