Fetch Evidence
Your browser fetches the governance envelope, Merkle inclusion proof, and Signed Tree Head from the AGTS transparency log via the Protocol Worker.
Recompute Hash Chain
Each governance proof contains a 5-component evidence chain: policy, validation, execution, lineage, and package hash. Your browser recomputes every hash independently.
Verify Merkle Inclusion
The audit path (sibling hashes) lets your browser recompute the Merkle root via SHA-256. If it matches the signed root in the STH, inclusion is proven.
Verify Signature
Ed25519 (+ optional SLH-DSA post-quantum) signature verification confirms the envelope was signed by the AGTS clearinghouse with no tampering.