Receipt verifier

Paste a receipt and the enclave measurement you expect. This page asks an independent verifier, not the server that ran the job, to check the signature, the AWS Nitro attestation and the key binding.

Receipt bundle (JSON)

The file saved by trustgate exec, or the receipt_bundle from an MCP result.

Expected enclave measurement (PCR0, hex)

Without a pinned measurement the check is skipped, and you have not confirmed which enclave image ran.

Verifier API address

What this does and does not show

A pass means: the receipt is signed by a key that a genuine AWS Nitro attestation document vouches for, and (if you pinned it) that document names the enclave image you expected. It does not mean the workload's answer is correct, and AWS Nitro remains the root of trust.