<!doctype html>
<!--
  trentpower.fr
  static, self-managed, privacy-first
  no analytics, no cookies, no external assets
  detached verification notes for /integrity/
-->
<html lang="en" dir="ltr">
<head>
  <!-- foundations -->
  <meta charset="utf-8">
  <script>(()=>{const e=document.documentElement;e.classList.add('js');try{const m=localStorage.getItem('tp-theme');if(m==='dark'||m==='light')e.dataset.theme=m}catch(_){}})();</script>
  <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
  <meta name="color-scheme" content="light dark">
  <meta name="supported-color-schemes" content="light dark">
  <meta name="theme-color" content="#E9E5DC">

  <!-- document -->
  <title>Verify locally · Trent Power</title>
  <meta name="description" content="Detached verification notes: signed manifest check from a temporary keyring">
  <meta name="document-edition" content="2026-05-19">
  <link rel="canonical" href="https://trentpower.fr/en/integrity/verify-locally/">
  <link rel="alternate" hreflang="en" href="https://trentpower.fr/en/integrity/verify-locally/">
  <link rel="alternate" hreflang="fr" href="https://trentpower.fr/fr/integrite/verifier-localement/">
  <link rel="alternate" hreflang="x-default" href="https://trentpower.fr/">

  <!-- identity -->
  <meta name="author" content="Trent Power">
  <meta name="application-name" content="Trent Power">
  <meta name="apple-mobile-web-app-title" content="Trent Power">
  <link rel="author" href="/.well-known/attribution.txt">
  <link rel="alternate" type="application/ld+json" href="/.well-known/person.json">

  <!-- discovery -->
  <meta name="robots" content="noindex">
  <meta name="referrer" content="no-referrer">

  <!-- social preview -->
  <meta property="og:type" content="website">
  <meta property="og:site_name" content="Trent Power">
  <meta property="og:title" content="Verify locally · Trent Power">
  <meta property="og:description" content="Detached verification notes: signed manifest check from a temporary keyring">
  <meta property="og:url" content="https://trentpower.fr/en/integrity/verify-locally/">
  <meta property="og:image" content="https://trentpower.fr/images/og/integrity-og.png">
  <meta property="og:image:width" content="1200">
  <meta property="og:image:height" content="630">
  <meta property="og:image:type" content="image/png">
  <meta property="og:image:alt" content="Verify locally · Trent Power">
  <meta name="twitter:card" content="summary_large_image">
  <meta name="twitter:title" content="Verify locally · Trent Power">
  <meta name="twitter:description" content="Detached verification notes: signed manifest check from a temporary keyring">
  <meta name="twitter:image" content="https://trentpower.fr/images/og/integrity-og.png">
  <meta name="twitter:image:alt" content="Verify locally · Trent Power">
  <meta name="twitter:site"    content="@trentpower">
  <meta name="twitter:creator" content="@trentpower">

  <!-- icons and app surface -->
  <link rel="icon" href="/favicon.ico" sizes="any">
  <link rel="icon" href="/favicon.svg" type="image/svg+xml">
  <link rel="apple-touch-icon" href="/apple-touch-icon.png">
  <link rel="manifest" href="/manifest.webmanifest" type="application/manifest+json">
  <link rel="license" href="https://creativecommons.org/licenses/by-sa/4.0/">

  <!-- assets -->
  <link rel="stylesheet" href="/styles.css?v=2026-05-19.054a4cde" integrity="sha384-fYEHgB0He+5IuoYhIzz6e2cPIEhWnCCdKeiPffyYNzo1SI5Y3zJ7QgNwLJ2x77i5">
  <link rel="stylesheet" href="/print.css?v=2026-05-19.054a4cde" media="print">

  <!-- structured data -->
  <script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","@id":"https://trentpower.fr/integrity/verify-locally/#article","headline":"Verify locally · Trent Power","url":"https://trentpower.fr/en/integrity/verify-locally/","description":"Detached verification notes for the signed integrity manifest","inLanguage":"en","isPartOf":{"@id":"https://trentpower.fr/#website"},"author":{"@id":"https://trentpower.fr/#trent-power"},"publisher":{"@id":"https://trentpower.fr/#trent-power"},"datePublished":"2026-05-13","dateModified":"2026-05-20T00:00:00+00:00"}</script>
</head>
<body data-page="integrity-verify-locally" data-layout="masthead" data-surface="record" data-masthead="brand-only" data-edition="2026-05-19">

<a href="#main" class="skip-link">Skip to content</a>

<header class="site-header" data-component="site-header">
  <div class="nav">
    <div class="nav-inner">
      <a class="nav-mark u-author" href="/en/" aria-label="Trent Power home"><span>Trent</span> <span>Power</span></a>
    </div>
  </div>
</header>

<main class="site" id="main" tabindex="-1" itemscope itemtype="https://schema.org/TechArticle">
  <div class="page">
    <p class="page-kicker">Verify Locally</p>
    <h1 class="page-title hero-stack"><span class="hero-line">Get to</span><span class="hero-line">the terminal!</span></h1>
    <div class="page-body">
      <p class="page-lede">Detached verification notes for the signed integrity manifest. Run the check in a temporary keyring so the public signing key does not enter your default keychain.</p>

      <div class="trust-code-block">
        <div class="trust-code-block-header">
          <button type="button" class="trust-code-copy verify-command-copy record-inline-action"
                  data-copy-target="integrity-verify-command"
                  data-copied="Copied">Copy command</button>
        </div>
        <pre class="trust-code" id="integrity-verify-command"><code><span class="code-var">tmpdir</span>=<span class="code-str">"$(mktemp -d)"</span>
<span class="code-cmd">export</span> <span class="code-var">GNUPGHOME</span>=<span class="code-str">"$tmpdir"</span>

<span class="code-var">ts</span>=<span class="code-cmd">$(</span>date +%s<span class="code-cmd">)</span>
<span class="code-cmd">curl</span> -fsS <span class="code-str">"https://trentpower.fr/integrity.json?ts=$ts"</span> -o integrity.json
<span class="code-cmd">curl</span> -fsS <span class="code-str">"https://trentpower.fr/integrity.json.sig?ts=$ts"</span> -o integrity.json.sig
<span class="code-cmd">curl</span> -fsS <span class="code-str">"https://trentpower.fr/.well-known/pgp-key.asc?ts=$ts"</span> | <span class="code-cmd">gpg</span> --import
<span class="code-cmd">gpg</span> --verify integrity.json.sig integrity.json

<span class="code-cmd">rm</span> -rf <span class="code-str">"$tmpdir"</span> integrity.json integrity.json.sig</code></pre>
      </div>

      <p class="integrity-page-level-note">The command imports the public key into a throw-away keyring, verifies the signed manifest, and removes the working files. No state is retained on the machine afterwards.</p>
    </div>
  </div>

</main>


<!-- body · footer -->
<footer class="site-footer" aria-label="Site footer">
  <div class="site-footer__inner">

    <!-- top stratum · identity · nav · language -->
    <div class="site-footer__top">

      <p class="site-footer__identity">
        <span class="year">&copy; <time datetime="2026">2026</time></span>
        <a class="wm" href="/en/" rel="home" aria-describedby="desc-home-footer">Trent Power</a>
        <span class="visually-hidden" id="desc-home-footer">Return to the homepage</span>
      </p>

      <nav class="site-footer__nav" aria-label="Footer">
        <span>Paris, France</span>
        <span class="sep" aria-hidden="true">&middot;</span>
        <a class="site-footer__action" href="/en/privacy/" rel="privacy-policy" aria-describedby="desc-privacy">Privacy</a>
        <span class="visually-hidden" id="desc-privacy">Read how this site avoids analytics, cookies, profiling, tracking, and third-party assets</span>
        <span class="sep" aria-hidden="true">&middot;</span>
        <button type="button" class="site-footer__action"
                data-cite-open aria-haspopup="dialog"
                aria-describedby="desc-cite">Verify</button>
        <span class="visually-hidden" id="desc-cite">Open citation and verification details for this page</span>
      </nav>

      <ul class="site-footer__language" aria-label="Language">
        <li><a href="/en/integrity/verify-locally/"  aria-describedby="desc-lang-en" lang="en" aria-current="page">English</a> <span class="visually-hidden" id="desc-lang-en">Read this site in English</span></li>
        <li aria-hidden="true"><span class="sep">&middot;</span></li>
        <li><a href="/fr/integrite/verifier-localement/" aria-describedby="desc-lang-fr" lang="fr">Français</a> <span class="visually-hidden" id="desc-lang-fr">Lire ce site en français</span></li>
      </ul>

    </div>

    <hr class="site-footer__break" aria-hidden="true">

    <!-- bottom stratum · imprint · theme -->
    <div class="site-footer__bottom">

      <dl class="site-footer__imprint is-loading" id="footerImprint" aria-label="Publication integrity">
        <dt>Edition</dt>
        <dd><span data-proof="edition">&mdash;</span></dd>
        <dt>SHA256</dt>
        <dd><a class="sha-link" href="/en/integrity/" aria-describedby="desc-integrity"
               data-proof="sha" title="View this page's entry in the signed integrity manifest">sha256:&mdash;</a> <span class="visually-hidden" id="desc-integrity">Open the public integrity record, including hashes, signatures, and release verification</span></dd>
        <dt>Verified</dt>
        <dd><span class="v--fresh" data-proof="verified">&mdash;</span></dd>
      </dl>

      <p class="site-footer__provenance" lang="fr">Machine-translated from the English original.</p>

      <ul class="site-footer__theme" aria-label="Appearance">
        <li><button type="button" data-theme="light"  aria-pressed="false" aria-describedby="desc-theme-light">Light</button> <span class="visually-hidden" id="desc-theme-light">Switch to the light appearance</span></li>
        <li aria-hidden="true"><span class="sep">&middot;</span></li>
        <li><button type="button" data-theme="system" aria-pressed="true"  aria-describedby="desc-theme-auto">Auto</button> <span class="visually-hidden" id="desc-theme-auto">Match the system appearance setting</span></li>
        <li aria-hidden="true"><span class="sep">&middot;</span></li>
        <li><button type="button" data-theme="dark"   aria-pressed="false" aria-describedby="desc-theme-dark">Dark</button> <span class="visually-hidden" id="desc-theme-dark">Switch to the dark appearance</span></li>
      </ul>

    </div>

  </div>
</footer>
<script src="/app.js?v=2026-05-19.054a4cde" integrity="sha384-0/d1GAleQvM4g3v1B1J2lZMV/tet5ROHlQ2MStFHV6elnL4HXZrGmuIjSlmZ02q4" defer></script>
<script src="/app-enhance.js?v=2026-05-19.054a4cde" integrity="sha384-nyFedKd06EN9LqTUpl41Ln9bJvrfivawSLNQXsWeHNV0GoZBdeVoZByRtUkUbQVR" defer></script>
<script src="/verify/verification-data.2026-05-19.f67fa860.js" integrity="sha384-/adA47A4jqcxm/Z29/ThNoY+wB/FcA3MU6cCOy6u11gsICzk4bcwwujyx+YXKvLG" defer></script>
<script src="/cite.js?v=2026-05-19.054a4cde" integrity="sha384-/UcbEl8xuRxvlwOOzFG3xYoqbPIzNPhv8o5HsASzLoHTo7cCVbGad1JqWH+GxGdl" defer></script>


<!-- print-only utility sheet -->
<div class="print-utility-sheet print-only" data-print-sheet="integrity-verify-locally" hidden aria-hidden="true">
  <header class="print-utility-header">
    <p class="print-utility-kicker">Integrity verification</p>
    <p class="print-utility-title">Verify locally</p>
    <p class="print-utility-lede">Detached verification notes for independently checking the signed integrity manifest using the published public key.</p>
    <p class="print-utility-meta">Edition 2026-05-19 · trentpower.fr/integrity/verify-locally/</p>
  </header>

  <div class="print-utility-grid">
        <div class="print-utility-card">
          <p class="print-utility-label"><span class="num">01</span> <span>Temporary keyring</span></p>
          <p>Use a temp GNUPGHOME so the import does not touch your main keyring.</p>
        </div>
        <div class="print-utility-card">
          <p class="print-utility-label"><span class="num">02</span> <span>Import public key</span></p>
          <p>curl /.well-known/pgp-key.asc · gpg --import pgp-key.asc.</p>
        </div>
        <div class="print-utility-card">
          <p class="print-utility-label"><span class="num">03</span> <span>Verify signature</span></p>
          <p>gpg --verify integrity.json.sig integrity.json - expect Good signature.</p>
        </div>
        <div class="print-utility-card">
          <p class="print-utility-label"><span class="num">04</span> <span>Check manifest</span></p>
          <p>/integrity.json lists every public file with its SHA-256.</p>
        </div>
        <div class="print-utility-card">
          <p class="print-utility-label"><span class="num">05</span> <span>Compare checksums</span></p>
          <p>Re-hash any file and compare against the manifest entry.</p>
        </div>
        <div class="print-utility-card">
          <p class="print-utility-label"><span class="num">06</span> <span>Reproducibility notes</span></p>
          <p>Each signed edition is frozen in /integrity/releases/. No mutable assets.</p>
        </div>
  </div>

  <footer class="print-utility-footer">
    <div class="print-utility-footer-text">
      <p class="print-proof">Private · Static · Signed · No tracking</p>
      <p>Edition 2026-05-19 · trentpower.fr/integrity/verify-locally/</p>
    </div>
    <div class="print-qr-block" aria-hidden="true">
      <img class="print-qr-image" src="/images/qr/qr-verify-locally.svg" width="144" height="144" loading="lazy" decoding="async" alt="">
      <p class="print-qr-url">trentpower.fr/integrity/verify-locally/</p>
    </div>
  </footer>
</div>

</body>
</html>
